Anda di halaman 1dari 331

www.ccieuniversity.

com

RouterToSwitchconnection
CAT1

CAT2
R1

F0/1

F0/1

F0/0F0/1
R2
F0/2

F0/2

F0/0F0/1
R3
R3F0/3

F0/3

F0/0

F0/1
R4

F0/4

F0/0F0/1

F0/4

R5
F0/5

F0/5

F0/0F0/1
R6
F0/6

F0/6

F0/0

F0/1

www.ccieuniversity.com

CAT1

CAT2
F0/20
F0/19

F0/22F0/21

F0/21 F0/22

F0/19
F0/20

SW3

SW4

CAT1

SW4
F0/7
F0/8

CAT2

SW3
F0/7
F0/8

www.ccieuniversity.com

Lab1
Basic3560configurationI

Task1
ConfigurethefirstandthesecondswitchtobeinVTPdomaincalledCCIE

BeforeassigningaVTPdomainname,theremustbeatrunkestablishedbetween
thetwoswitchessotheconfigurationswillbepropagatedtotheotherswitch.

Onboth switches
Switch#Showinterfacetrunk
Switch#
Notethetwo3560sswitchesareconnectedwith 2crossoverethernetcables,ifthese
switcheswere3550s,thetwo portswouldhavenegotiatedanISLtrunk,actually
theywouldshowupasnisl,thisisbecausebydefaulttheportswereconfigured
indesirablemode.With3560switches,theportsarenotindesirablemode,ashow
runintf0/19willrevealthisinformation,andtherefore,theport/smustbe
configuredstaticallytotrunkornegotiateatrunk.

OnBothswitches:
Switch#Showcdpneighbors
CapabilityCodes:RRouter,T TransBridge,BSourceRouteBridge
S Switch,HHost, I IGMP,r Repeater,P Phone
DeviceIDLocalIntrfceHoldtmeCapabilityPlatform
PortID
Switch
Fas0/22
178SI
WSC35602Fas0/22
Switch
Fas0/21
178SI
WSC35602Fas0/21
Switch
Fas0/20
178SI
WSC35602Fas0/20
Switch
Fas0/19
177SI
WSC35602Fas0/19
Switch
Fas0/7
178SI
WSC35602Fas0/7
Switch
Fas0/8
177SI
WSC35602Fas0/8
NotetheShowcdpneighborscommandrevealstheportsconnectingthetwo
switches.Theoutputmaybedifferent.

www.ccieuniversity.com

OnBothswitches:
Switch(config)#intrangef0/1920
Switch(configifrange)#switchporttrunkencapsulationisl
Switch(configifrange)#switchportmodetrunk

Toverifytheconfiguration:
On thefirstswitches:
Switch#Showinttrunk
Port
ModeEncapsulationStatus
Nativevlan
Fa0/19on
isl
trunking1
Fa0/20on
isl
trunking1
PortVlansallowedontrunk
Fa0/1914094
Fa0/2014094
PortVlansallowedandactiveinmanagementdomain
Fa0/191
Fa0/201
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191
Fa0/20 none
Nowthatthetrunkisestablishedbetweenthetwoswitches,youcangoonwithVTP
configurationasfollows:

Onthefirstswitch
Switch(config)#VTPdomainCCIE
Bydefaultthe3560switchesarememberofadomaincalledNULL,therefore,after
enteringtheabovecommand,you will getthefollowingmessageunlesstheswitch
wasmemberofanotherdomain:
ChangingVTPdomainnamefromNULLtoCCIE
ThistaskcouldalsobeaccomplishedbyenteringtheVLANdatabaseasfollows:

www.ccieuniversity.com

Switch#Vlandatabase
Switch(vlan)#VtpdomainCCIE
Switch(vlan)#Exit
WhenacommandisenteredintheVlandatabase,youmustperformtheexitor
theapplycommandforthechangestotakeeffect.
NotethedisplaybelowrevealsthatVTPpropagatedtheVTPdomaininformationto
thesecondswitch:

Onthesecondswitch:
Switch#Shvtpstatus
VTPVersion
:2
ConfigurationRevision
:0
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:5
VTPOperatingMode
:Server
VTPDomainName
:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x570xCD0x400x650x630x590x470xBD
Configurationlastmodifiedby0.0.0.0at000000:00:00
LocalupdaterIDis0.0.0.0(novalidinterfacefound)

Task2
ThisVTPdomainshouldbepasswordprotectedusingCiscoasthepassword.

On bothswitches
Switch(config)#vtppasswordCisco
Youshouldgetthefollowingmessage:
SettingdeviceVLANdatabasepasswordtoCisco
Note,ifa domainnameisnotassignedtotheswitchesand thedefaultnameof
NULLisused,apasswordcannotbeassigned.
ThisVTPpasswordcommandcanbeenteredinglobalconfigurationmode,
privilegeconfigurationmodeorintheVLANdatabasemode.

www.ccieuniversity.com

Thepasswordcommandmustbeconfiguredstaticallyonbothswitchesbecausethis
changewillNOTgetpropagatedviaVTPmessages.

Toverifytheconfiguration:
OntheFirstswitch
Switch#Showvtpstatus
VTPVersion
:2
ConfigurationRevision
:0
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:5
VTPOperatingMode:Server
Themodeisserverbydefault
VTPDomainName:CCIE
Thedomainname
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x140x7D0x150x090xDC0x390x650xC2
Configurationlastmodifiedby0.0.0.0at000000:00:00
LocalupdaterIDis0.0.0.0(novalidinterfacefound)
VTPpasswordcanbechangedinthreeways:
Privilegemode:
Switch#vtppasswordCisco
VlanDatabase:
Vlandatabase
VtppasswordCisco
Exit
Globalconfigmode:
Switch(config)#vtppasswordCisco

OntheSecondswitch
Switch#Showvtpstatus
VTPVersion
:2
ConfigurationRevision:0
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:5
VTPOperatingMode:Server

Themodeisserverbydefault

www.ccieuniversity.com

VTPDomainName:CCIE
Thedomainname
VTPPruningMode:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration:Disabled
MD5digest
:0x570xCD0x400x650x630x590x470xBD
Configurationlastmodifiedby0.0.0.0at000000:00:00
LocalupdaterIDis0.0.0.0(novalidinterfacefound)

Onanyoftheswitches:
Switch#ShowVTPpassword

Thisverifiesthepassword,remember
Spaceswillnotshow

VTPPassword:Cisco

Task3
ThefirstCatalystswitchshouldbeconfiguredwithahostnameof Cat1andthesecond
Catalystshouldhaveahostnameof Cat2.

OnthefirstSwitch
Switch(config)#HostnameCat1

OntheSecondSwitch
Switch(config)#HostnameCat2
Task4
Cat2shouldNOThavetheabilitytocreate,deleteorrenameVLANorVLAN
information.

On Cat2
Cat2(config)#Vtpmodeclient
Thisconfigurationcanbeperformedinthevlandatabaseor globalconfigmode.

www.ccieuniversity.com

Theabovecommanddisplaysthecommandasitwasenteredintheglobalconfig
mode.Ifyouareaskedtoenterthecommandinthevlandatabase,youmustfirst
enterthevtpdatabasecommandintheprivilegemode,thenenter vtpclient
andlastlytheexitcommandmustbeusedforthechangestotakeeffect.
Oncethecommandisenteredyoushouldgetthefollowingmessage:
SettingdevicetoVTPCLIENTmode.
Theswitchescanoperateinthreemodesandtheyareasfollows:
SERVERTheswitchisabletodelete,create,orrenameVLAN
information.Catalyst3560in servermodeparticipatesintheVTP
domainandpropagatestheVLANinformation.
CLIENTInthismodetheswitchisabletoreceiveandprocessthe
VTPmessages,buttheyarenotabletocreate,delete,orrename
VLANinformation.TheycanassignaporttoagivenVLANthat
alreadyexists.Catalyst3560inclientmodeparticipatesintheVTP
domainandpropagatestheVTPmessages.
TransparentInthismodetheswitchisabletocreate,deleteand
modifytheVLANinformationbutitwillnotpropagateitsVLAN
informationtootherswitches.Catalyst3560switchesinthismodedo
NOTparticipateinVTPdomain.ACatalyst3560switchmustbein
thismodeinordertocreatetheextendedrangeVLANs(10064094),
thisconfigurationcanonlybeperformedinthe globalconfigmode
andNOTin the Vlandatabase. Whentheswitchisinthismodethe
VLANinformationispartoftherunningorstartupconfiguration,the
VLANinformationisNOTkeptintheVLANdatabase(vlan.dat).

Task5
CreateandconfigurethefollowingVLANassignmentson Cat1:

RouterInterface
R1F0/0
R2F0/0
R3F0/0
R4F0/0
R5F0/0
R6F0/0

VLANnumber
12
12
34
34
56
56

CATSwitchesPort
SW1F0/1
SW1F0/2
SW1F0/3
SW1F0/4
SW1F0/5
SW1F0/6

www.ccieuniversity.com

On Cat1
Cat1(config)#interfacerangef0/12
Cat1(configif)#switchmodeaccess
Cat1(configif)#switchaccessvlan 12
Cat1(config)#interfacerangef0/34
Cat1(configif)#switchmodeaccess
Cat1(configif)#switch accessvlan 34
Cat1(config)#interfacerangeF0/56
Cat1(configif)#switchmodeaccess
Cat1(configif)#switch accessvlan 56
Cat1(configif)#End
NotetheVlaninformationwillbepropagatedtotheotherswitch(Cat2),because
bothswitchesareinthesameVTPdomainandtheyarebothconfiguredwiththe
samepassword.

On Cat2
Cat2#Showvlanbrie
VLANNameStatusPorts

1defaultactiveFa0/1,Fa0/2,Fa0/3,Fa0/4
Fa0/5,Fa0/6,Fa0/7,Fa0/8
Fa0/9,Fa0/10,Fa0/11,Fa0/12
Fa0/13,Fa0/14,Fa0/15,Fa0/16
Fa0/17,Fa0/18,Fa0/23,Fa0/24
Gi0/1,Gi0/2
12VLAN0012active
34 VLAN0034active
56VLAN0056active
(Therestoftheoutputisomitted)
Cat2#ShowVTPStatus
VTPVersion:2
ConfigurationRevision:3
Maximum VLANssupportedlocally:1005
NumberofexistingVLANs:8
VTPOperatingMode:Client
VTPDomainName:CCIE

www.ccieuniversity.com

VTPPruningMode:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration:Disabled
MD5digest:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby0.0.0.0at319300:06:11
LocalupdaterIDis0.0.0.0(novalidinterfacefound)

On Cat1
Cat1#ShowVTPStatus
VTPVersion:2
ConfigurationRevision:3
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:8
VTPOperatingMode:Server
VTPDomainName:CCIE
VTPPruningMode:Disabled
VTPV2Mode:Disabled
VTPTrapsGeneration
:Disabled
MD5digest:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby0.0.0.0at319300:06:11
LocalupdaterIDis0.0.0.0(novalidinterfacefound)
Note,VTPversionis2,Configurationrevisionis3,numberofexistingVLANsis8
onbothswitches,(becausetheyaresynchronized),andthereasontheVLAN
informationwaspropagatedisbecausetheVTPdomainnameandthepasswordis
identicalonbothswitchesandtheswitchesaretrunked.

Task6
ConfigureLoopback0andLoopback1interfaceson Cat1,usetheIPaddressof1.1.1.1
/8and11.1.1.1/8respectively andensurethatONLY theIPaddressofLoopback1
interfaceisusedasthepreferredsourcefortheVTPIPupdateraddress.

NoteinthepreviousTaskwhentheshowvtpstatuscommandwasenteredon
Cat1, thelastlineoftheoutputdisplayednovalidinterfacefound.
NoteCat1 willalwaysusetheloopback0interfaceasthesourceofallVTP
messages,butthisbehaviorcanbechangebyusingtheVTPinterfaceLoopback1
globalconfigcommand.

On Cat1

www.ccieuniversity.com

Cat1(config)#InterfaceLoopback0
Cat1(configif)#Ipaddress1.1.1.1255.0.0.0
Cat1(config)#InterfaceLoopback1
Cat1(configif)#Ipaddress11.1.1.1255.0.0.0
Cat1#Showvtpstatus
VTPVersion:2
ConfigurationRevision:3
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:8
VTPOperatingMode
:Server
VTPDomainName:CCIE
VTPPruningMode:Disabled
VTPV2Mode:Disabled
VTPTrapsGeneration:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby0.0.0.0at319300:06:11
LocalupdaterIDis1.1.1.1oninterfaceLo0(preferredinterface)
Preferredinterfacenameislo0
NoteLoopback0isusedasthesourceofallVTPmessages.Enterthefollowing
commandtochangethesourcetoLoopback1interface:
Cat1(config)#VtpinterfaceLoopback1only
NotetheONLYargumentmakesthisinterfacemandatory.

Toverifytheconfiguration:
On Cat1
Cat1#Showvtpstatus
VTPVersion
:2
ConfigurationRevision: 3
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:8
VTPOperatingMode:Server
VTPDomainName:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D

www.ccieuniversity.com

Configurationlastmodifiedby0.0.0.0at319300:18:54
LocalupdaterIDis11.1.1.1oninterfaceLo1(preferredinterface)
Preferredinterfacenameisloopback1(mandatory)

On Cat2
Cat2#Showvtpstatus
VTPVersion
:2
ConfigurationRevision
:3
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs:8
VTPOperatingMode:Client
VTPDomainName:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby0.0.0.0at319300:22:29
Notethischangehasnotbeenpropagated,therefore,youmustcreateaVLAN
(VLAN80)on Cat1 soyoucanseethatthechangewasmadebytheLoopback 1
interfacewithanIPaddressof 11.1.1.1onCat2.ThisVLANshouldbedeleted
beforeproceedingtothenexttask.

On Cat1
Cat1(config)#Vlan80
Cat1(configvlan)#Exit

Toverifytheconfiguration:
On Cat2
Cat2#Showvtpstatus
VTPVersion
:2
ConfigurationRevision
:4
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:9
VTPOperatingMode
:Client
VTPDomainName
:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled

www.ccieuniversity.com

VTPTrapsGeneration
:Disabled
MD5digest
:0x020x050x920x340xF00xC00x350x9D
Configurationlastmodifiedby11.1.1.1at319300:34:33

On Cat1
Cat1(config)#Novlan80

Task7
ConfigureatrunkbetweenthetwoswitchesusingportsF0/19andF0/20.Noneof these
switchesshoulduseDTPtonegotiatethetrunk.

On BothSwitches
(config)#InterfacerangeF0/1920
(configifrange)#Switchportmodetrunk
(configifrange)#Switchportnonegotiate
Notetheportsmustbeintrunkmodebeforethenonegotiatecommandisentered,
otherwiseyouwillreceivethefollowingerrormessage:
Commandrejected:Conflictbetweennonegotiateanddynamicstatus.
Aportcanbeconfiguredasfollows:
StaticAccessThisportcanbelongtoONLYoneVLAN,anditsmanually
assignedtoagivenVLAN.

Trunk AtrunkportbydefaultismemberofallnormalrangeVLANs11005(but
notethatVLANs1,1002 1005areautomaticallycreatedandcannotberemoved,
only2to1001canbemanuallycreated,theseVLANsarekeptintheVLAN.DAT).
ThisalsoincludestheextendedrangeVLANs(10064094),andthismembership
canbelimitedbyconfiguringtheallowedvlancommand.Thisportcanbe
encapsulatedbyISLortaggedby802.1q.
DynamicAccessAdynamicaccessportcanonlybeamemberofonenormal
VLAN,andtheseportsaredynamicallyassignedtoagivenVLANbyaVMPS.
VoiceVLANThisisanaccessportconnectedtoanIPphonesuchasCiscos7960,
andthisVLANisusedforVoicetraffic.

www.ccieuniversity.com

Dot1qTunnel Thesearetunnelportsandareusedfor802.1qtunnelingto
maintaincustomerVLANintegrityacrossaserviceprovidersnetwork.Atunnel
portisconfiguredonanedgeswitchintheserviceprovidersnetworkandits
connectedtoan802.1qtrunkportonacustomerswitchsinterface,atunnelport
belongstoasingleVLANthatisdedicatedtotunneling.

Task8
Configuretheswitchessuchthatfloodedtrafficisrestrictedtothetrunklinksthatthe
trafficmustusetoreachthedestinationdevice.

Toseethedefaultsetting:

On Cat2
Cat2#Show vtpstatus
VTPVersion
:2
ConfigurationRevision
: 5
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:8
VTPOperatingMode
:Client
VTPDomainName
:CCIE
VTPPruningMode
:Disabled
VTPV2Mode
:Disabled
Pruningisdisabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby 11.1.1.1at319300:12:48
NoteVTPPruningisdisabledbydefault,enterthefollowingtoenableVTP
pruning:

On Cat1
Cat1#Vtppruning
Thiscommandcanbeconfiguredinprivilegemode,Globalconfigmode,and/orin
theVlandatabase.Oncethisfeatureisenableditwillgetpropagatedtotheother
switcheswithintheVTPdomain.

Toverifytheconfigurationonbothswitches:

www.ccieuniversity.com

On Cat2
Cat2#Show vtpstatus
VTPVersion
:2
ConfigurationRevision
: 5
MaximumVLANssupportedlocally:1005
NumberofexistingVLANs
:8
VTPOperatingMode
: Client
VTPDomainName
:CCIE
VTPPruningMode:Enabled
VTPV2Mode
:Disabled
VTPTrapsGeneration
:Disabled
MD5digest
:0x970x9D0xF10xF90xFE0x210xCC0x1D
Configurationlastmodifiedby 11.1.1.1at319300:12:48
NoteVTPmessagespropagatethechangethroughtheentireVTPdomain.

Task9
ConfigureCat1andCat2 suchthatonlythetrunkports(F0/19andF0/20)andtheports
thatroutersR1toR6areconnectedtoareinuse,therestoftheportsshouldbe
configuredinadministrativelydownstate.

OnBothSwitches:
(config)#Intrangef0/718,F0/2124
(configifrange)#Shut

Task10
EnsurethatCat1 istherootbridgefortheVLANs12,34andCat2 istherootbridgefor
VLAN56.DoNOTuse theprioritycommandtoaccomplishthistask.

Therearethreecommandsthatcanbeusedto displaytheBIDforagivenswitch:
Showversion
Showspanningtreebridge

www.ccieuniversity.com

On Cat1
Cat1#Showversion
Cat1#Showver
CiscoIOSSoftware,C3560Software(C3560ADVIPSERVICESK9M),Version12.2(25)SEE2,
RELEASESOFTWARE(fc1)
Copyright(c)19862006byCiscoSystems,Inc.
CompiledFri28Jul0612:34byyenanh
Imagetextbase:0x00003000,database:0x012237D0
(Theoutputisomitted)
512Kbytesofflashsimulatednonvolatileconfigurationmemory.
BaseethernetMACAddress:00:19:56:DB:94:00
Motherboardassemblynumber :73989706
Powersupplypartnumber
:341009702
Motherboardserialnumber
:CAT10385ERJ
Powersupplyserialnumber
: DCA103584S4
Modelrevisionnumber
:D0
(Therestoftheoutputisomitted)
ThebaseMAC
ThefollowingcommandrevealsthebaseMACaddressoftheswitch,thecombinationof
priorityandthebase MACaddressistheBIDfor agivenswitch.
Cat1#Showspanningtreebridge

Vlan

VLAN0001
VLAN0012
VLAN0034
VLAN0056

HelloMaxFwd
BridgeID
TimeAge DlyProtocol

32769 (32768,1) 0019.56db.9400 2 20 15 ieee
32780 (32768,12) 0019.56db.9400 2 20 15 ieee
32802 (32768,34) 0019.56db.9400 2 20 15 ieee
32824 (32768,56) 0019.56db.9400 2 20 15 ieee

Notetheprioritystartswith32768,eachVLANthatiscreatedaddsitsVLANnumberto
thedefaultpriorityvalue(IfthebasepriorityandtheVLANnumberisaddedwithinthe
parenthesis,thesumwillbethepriorityforthatgivenVLAN),VLAN12adds12tothe
defaultpriorityvaluethereforethepriorityis32780andVLAN34adds34tothedefault
priorityvalue,therefore,thepriorityis32802.Notethat theMACisthebaseMACaddress
andit remainsthesame,inthiscase(0019.067f.8900).
NoteyourMACaddressmaybedifferent.
TofindouttheBIDandtherootbridgeforagivenVLAN,enterthefollowingShow
command:

On Cat1

www.ccieuniversity.com

Cat1#Showspanningtreevlan12
VLAN0012
Spanningtreeenabledprotocolieee
TheMACaddressoftherootbridge
RootIDPriority32780
Address0019.56db.9400
Thisbridgeistheroot
HelloTime2secMaxAge20secForwardDelay15sec
BridgeIDPriority32780(priority32768sysidext12)
Address0019.56db.9400
HelloTime2secMaxAge20secForwardDelay15sec
AgingTime300
TheMacaddressofthelocalswitch
Interface
Role Sts CostPrio.NbrType

Fa0/19
Desg FWD 19128.21 P2p
Fa0/20Desg FWD 19128.22 P2p
NotetheoutputoftheShowspanningtreevlan12onyourswitchmightshowmoreports.
EnterthefollowingcommandstoconfigureCat1tobetherootbridgeforVLANs12and
34:

On Cat1
Cat1(config)#Spanningtreevlan12,34rootprimary
TheabovecommandconfiguresCat1tobetherootforVLANs12and34theroot
keywordisamacrothatreducestheBIDofthe switchforagivenVLANbyavalueof 8192
(Thelower valueisthepreferredvalue).Therearenospacesbetweenthe12andthecomma
andthe34.
Cat1#Showspanningtreevlan12
VLAN0012
Note32768+128192=24588
Spanningtreeenabledprotocolieee
RootID Priority24588
Address0019.56db.9400
Thisbridgeistheroot
HelloTime2secMaxAge20secForwardDelay15sec
BridgeID Priority24588 (priority24576sysidext12)
Address0019.56db.9400
HelloTime2secMaxAge20secForwardDelay15sec
AgingTime300

www.ccieuniversity.com

InterfaceRoleStsCost
Prio.NbrType

Fa0/19DesgFWD19
128.21P2p
Fa0/20DesgFWD19128.22P2p

On Cat2
Cat2(config)##Spanningtreevlan 56rootprimary

Toverifytheconfiguration:

Cat2
Cat2#Showspanningvlan56
VLAN0056
Spanningtreeenabledprotocolieee
RootID Priority24632
Address001a.2f0a.2000
Thisbridgeistheroot
HelloTime2secMaxAge20secForwardDelay15sec
BridgeID Priority24632 (priority24576sysidext56)
Address001a.2f0a.2000
HelloTime2secMaxAge20secForwardDelay15sec
AgingTime300
InterfaceRoleStsCostPrio.NbrType

Fa0/19DesgFWD19128.21P2p
Fa0/20DesgFWD19128.22P2p

Task 11
ConfigureCat1suchthattheportsthattheroutersareconnectedtobypasslisteningand
learningstate.IfanyoftheseportsreceiveBPDUpackets,they shouldtransitioninto
errdisablestate.Useminimumnumberofcommandstoaccomplishthistask. This
configurationshouldonlybeappliedtotheportsthattheroutersR1 R6areconnected
to.

www.ccieuniversity.com

On Cat1
Cat1(config)#Spanningtreeportfastbpduguarddefault
Cat1(config)#InterfacerangeF0/16
Cat1(configif)#Spanningtreeportfast
Oncetheportfastcommandisenteredyoushouldseethefollowingwarning
message:
%Warning:portfastshouldonlybeenabledonportsconnectedtoasingle
host.Connectinghubs,concentrators,switches,bridges,etc...tothis
Interfacewhenportfastisenabled,cancausetemporarybridgingloops.
UsewithCAUTION
%Portfastwillbeconfiguredin6interfacesduetotherangecommand
butwillonlyhaveeffectwhentheinterfacesareinanontrunkingmode.
Thespanningtreeportfastbpduguarddefaultcommandinglobalconfigmode
willshuttheportdowninerrdisablemodeifanyportfastenabledportreceives
BPDUpackets.

Task 12
ConfigureCat2suchthattheportsthattheroutersareconnectedto(F0/1F0/6) bypass
listeningandlearningstate.IfanyoftheseportsreceiveBPDUpackets,they should
loosetheirportfaststate. Thisconfigurationshouldapplytoexistingandfutureportsthat
areconfiguredasportfast.

On Cat2
Cat2(config)#Spanningtreeportfastbpdufilterdefault
Cat2(config)#InterfacerangeF0/16
Cat2(configif)#Spanningtreeportfast
Oncetheportfastcommandisenteredyoushouldseethefollowingwarning
message:
%Warning:portfastshouldonlybeenabledonportsconnectedtoasingle
host.Connectinghubs,concentrators,switches,bridges,etc...tothis
Interfacewhenportfastisenabled,cancausetemporarybridgingloops.
UsewithCAUTION

www.ccieuniversity.com

%Portfastwillbeconfiguredin6interfacesduetotherangecommand
butwillonlyhaveeffectwhentheinterfacesareinanontrunkingmode.
Atthegloballevel,youcanenableBPDUfilteringonPortFastenabledinterfaces
byusingthespanningtreeportfastbpdufilterdefaultglobalconfiguration
command.

Task 13
YoureceivedarequestfromtheITdepartmenttomonitorandanalyzeallthepackets
sentandreceivedbythehostconnectedtoportF0/14on Cat1 youhaveconnectedthe
packetanalyzertoportF0/15onthesameswitch.Configuretheswitchtoaccommodate
thisrequest.

On Cat1
Cat1(config)#monitorsession1sourceinterfaceF0/14both
Cat1(config)#monitorsession1destinationinterfaceF0/15
Notethefollowing:
Therecanonlybetwomonitor sessionsconfiguredonagivenswitch
TheirdirectiontomonitorcanbeconfiguredasRx,Tx,orBoth. Rxis
forreceivedtraffic,TxisforTransmittedtraffic,andbothisinboth
direction.
VLANscanONLYbeconfiguredinRxdirection.
ToverifyEnter theShowmonitorsession1command.

Toverifytheconfiguration:
On Cat1
Cat1#Showmonitorsession1
Session1

Type:LocalSession
SourcePorts:
Both:Fa0/14
Destination Ports:Fa0/15
Encapsulation:Native
Ingress:Disabled

www.ccieuniversity.com

Task14
YoureceivedanotherrequestfromyourITdepartmenttokeeptrackofalltheMAC
addressesthatarelearnedby Cat2portF0/18.Theswitchmustuse theNMSlocatedat
192.168.1.1/24,configuretheswitchtohandlethisrequest. YoushoulduseanIP
addressof2.2.2.2/8toaccomplishthistask.

On Cat2
Cat2(config)#Snmpserverhost192.168.1.1trapprivate
%IP_SNMP3SOCKET:can'topenUDPsocket
Unabletoopensocketonport161
NotesincethisswitchisnotconfiguredwithanIPaddress,itwillfailtoconfigure
theSnmpserver.Therefore,anIPaddressshouldbeconfiguredbeforeenteringthe
snmpservercommandasfollows:
Cat2(config)#Intlo0
Cat2(configif)#Ipaddr2.2.2.2255.0.0.0
Cat2(config)#snmpserverhost192.168.1.1 trapprivate
(TosetuptheSnmpServer)
Cat2(config)#snmpserverenabletrapsmacnotification
ConfigurestheswitchtosendmacaddresstrapstotheNMS
Cat2(config)#macaddresstablenotification
ToenableMACaddressnotification
Cat2(config)#Interf0/18
Cat2(configif)#snmptrapmacnotificationadded
TheabovecommandenablestheSNMPtrapon interfaceF0/18andconfiguresthe
switchtosendMACnotificationtrapswheneveraMACaddressisadded.Ifthe
switchmustbeconfiguredtoreporttheMACaddressesthatarelearntandexpired,
thensnmptrapmacnotificationremovedcommandmustalsobeconfigured.

Toverifytheconfiguration:
Cat2#Showmacaddresstablenotificationinterfacef0/18
MACNotificationFeatureisEnabledontheswitch
Interface
MACAddedTrapMACRemovedTrap

www.ccieuniversity.com

FastEthernet0/18 Enabled
Disabled
Noteifthesnmptrapmacnotificationremovedcommandwasalsoenteredfor
F0/18interface,undertheMACremovedTrapcolumnyouwillalsoseeas
Enabled.

Cat2#Showmacaddresstablenotification
MACNotificationFeatureisEnabledontheswitch
IntervalbetweenNotificationTraps:1secs
NumberofMACAddressesAdded:0
NumberofMACAddressesRemoved:0
NumberofNotificationssenttoNMS:0
MaximumNumberofentriesconfiguredinHistoryTable:1
CurrentHistoryTableLength :0
MACNotificationTrapsareEnabled
HistoryTablecontents

Task15
On Cat2portF0/14configuretheamountofbandwidthutilizationforbroadcasttraffic
to50%.

On Cat2
Cat2(config)#InterfaceF0/14
Cat2(configif)#Stormcontrolbroadcastlevel50.00
StormcontrolcanbeusedforBroadcast,UnicastandMulticasttraffic,this
commandspecifiestrafficsuppressionlevelforagiventypeoftrafficfora
particularinterface.Thelevelcanbefrom0to100andanoptionalfractionofa
levelcanalsobeconfiguredfrom099.Athresholdvalueof100percentmeans
thatnolimitisplacedforthespecifiedtypeoftrafficavalueof0.0meansthatthe
particulartypeoftrafficisblockedalltogether.
On3550switcheswhentherateofMulticasttrafficexceedsapredefinedthreshold,
allincomingtraffic(Broadcast,MulticastandUnicast)isdroppeduntilthelevel of
Multicasttrafficisdroppedbelowthethresholdlevel.Oncethisoccurs,onlythe
Spanningtreepacketsareforwarded.WhenBroadcastor Unicastthresholdsare
exceeded,trafficisblockedforonlythetypeoftrafficthatexceededthethreshold.

Toverifytheconfiguration:

www.ccieuniversity.com

Cat2#Showstormcontrolf0/14broadcast
InterfaceFilterState
Upper
LowerCurrent

Fa0/14Forwarding50.00%50.00%0.00%
Task16
MacaddresseslearntdynamicallybythesetwoswitchesshouldnotstayintheMAC
addresstableiftheyareinactiveforlongerthan10minutes.

BydefaulttheMACaddressesthatareinactivewillexpirewithin300seconds,this
taskisaskingfora10minutesthreshold,10minutesequatesto600seconds,the
followingcommandwill accomplishthistask:

On Cat1andCat2
(config)#Macaddresstableagingtime600

Toverifytheconfiguration:
On Cat1orCat2
Cat1#Shmacaddresstableagingtime
VlanAgingTime

1600
12600
34600
56600

Task17
Formanagementpurposes,assignanIPaddressof10.1.1.11/24toCat1,withadefault
gatewayof10.1.1.2/24.

On Cat1

www.ccieuniversity.com

Cat1(config)#InterVlan1
Cat1(configif)#Ipaddress10.1.1.11255.255.255.0
Cat1(configif)#Noshut
Cat1(configif)#Exit
Cat1(config)#Ipdefaultgateway10.1.1.2

Task18
ConfigureroutersR1andR3usingthefollowingIPaddresses:
R1F0/0=10.1.12.1/24
R3F0/0=10.1.34.3/24
ConfigureCat1 toroutebetweenVLAN12and34suchthattheserouterscanpingeach
other.UseanyIpaddresson Cat1 toaccomplishthistask.

OnR1
R1(config)#InterfaceF0/0
R1(configif)#Ipaddress10.1.12.1255.255.255.0
R1(configif)#Noshut
R1(configif)#Exit
R1(config)#Iproute0.0.0.00.0.0.010.1.12.100

OnR3
R3(config)#InterfaceF0/0
R3(configif)#Ipaddress10.1.34.3255.255.255.0
R3(configif)#Noshut
R3(configif)#Exit
R3(config)#Iproute0.0.0.00.0.0.010.1.34.100

On Cat1
Cat1(config)#Iprouting
Cat1(config)#InterfaceVlan12
Cat1(configif)#Ipaddress10.1.12.100255.255.255.0
Cat1(configif)#Noshut

www.ccieuniversity.com

Cat1(config)#InterfaceVlan34
Cat1(configif)#Ipaddress10.1.34.100255.255.255.0
Cat1(configif)#Noshut
ASwitchVirtualInterface(SVI)representsaVLANofswitchportsasoneinterface
totherouting.OnlyoneSVIcanbeassociatedwithaVLAN.Thisisnecessarywhen
configuringInterVlanrouting.
WhencreatinganSVIforaVLAN,thedesignatednumbermustmatchtheVLAN
number.

Toverifytheconfiguration:
OnR1
R1#Ping10.1.34.100
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto10.1.34.100,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=1/2/4ms

OnR3
R3#Ping10.1.12.100
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto10.1.12.100,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=1/2/4ms

Task 19
RemovetheconfigurationfromthepreviousstepandconfigureInterVlanrouting
betweenVLANs12and34.DONOTuseSVIstoaccomplishthistask.F0/1interfaceof
anyroutercanbeusedtoaccomplishthistask.UsetheIPaddressingfromtheprevious
task.Ensuretouseanindustrystandardprotocolforthetrunk.

SinceR5sF0/0ispartofVLAN56,R5sF0/1isusedtoaccomplishthistask.

On Cat1
Cat1(config)#NoInterfaceVlan12

www.ccieuniversity.com

Cat1(config)#NoInterfaceVlan34

On Cat2
Cat2(config)#Iprouting
Cat2(config)#InterfaceF0/5
Cat2(configif)#SwitchporttrunkencapDot1q
Cat2(configif)#Switchportmodetrunk

OnR5
R5(config)#InterfaceF0/1
R5(configif)#Noshut
R5(configif)#Exit
R5(config)#Intf0/1.12
R5(configif)#Encapdot1q12
R5(configif)#Ipaddress10.1.12.100255.255.255.0
R5(config)#Intf0/1.34
R5(configif)#Encapdot1q34
R5(configif)#Ipaddress10.1.34.100255.255.255.0

Toverifytheconfiguration:
OnR1&R3
R1#Cleararp

OnR1
R1#Ping10.1.34.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto10.1.34.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5), roundtripmin/avg/max=1/1/4ms

OnR3
R3#Ping10.1.12.1
Typeescapesequencetoabort.

www.ccieuniversity.com

Sending5,100byteICMPEchosto10.1.12.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=1/2/4ms
Task20
ConfigureCat1suchthatwhenevertheswitchlearnsorremovesaMACaddressonits
portF0/18,anSNMPnotificationisgeneratedandsenttotheNMSlocatedat
192.168.1.100.Sincetherearemanyuserscomingandgoingfromthenetwork,setupa
trapintervaltimetobundlethenotificationtrapsandreducenetworktrafficusingthe
followingparameters:
Thetrapsshouldbegeneratedevery30minutes.
Thetrapshouldcontainamaximumof150entries.

ThisfeatureenablesustotrackusersonanetworkbystoringtheMacaddress
activityontheswitch.Onceconfigured,everytimeaMACaddressislearnedor
removedanSNMPnotificationisgeneratedandsenttotheNMS.Onaverybusy
networkwhenlotsofuserscomeandgo,thedefaultbehavioristhatanSNMPtrap
issenteverysecond.Becausethiscanconsumebandwidth,therearetwoparameters
thatcanbeconfiguredtoremedythissituationandtheyareasfollows:
Macaddresstablenotificationinterval Thisvaluespecifiesthenotification
trapintervalinsecondsbetweeneachsetoftrapsthataregeneratedtotheNMS.
Defaultvalueisonesecond,andtherangeis02,147,483,647seconds.
MacaddresstablenotificationhistorysizeSpecifiesthemaximumnumberof
entriesintheMACnotificationhistorytable.Thedefaultvalueis1,andtherange
is1500entries.

On Cat1
Cat1(config)#Snmpserverhost192.168.1.100trapsprivate
TheabovecommandidentifiestheNMS
Cat1(config)#Snmpserverenabletrapsmacnotification
ThiscommandenablesSNMPtrapsmacnotification
Cat1(config)#Macaddresstablenotification
Theabovecommandenablesthemacaddresstablenotificationontheswitch
Cat1(config)#Macaddresstablenotificationinterval1800
Thiscommandsetstheinterval

www.ccieuniversity.com

Cat1(config)#Macaddresstablenotificationhistorysize150
Thiscommandsetsthehistorysize
Cat1(config)#Intf0/18
Cat1(configif)#Snmptrapmacnotificationadded
ToenabletheMACnotificationtrapwheneveraMACaddressisadded
Cat1(configif)#Snmptrapmacnotificationremoved
ToenabletheMACnotificationtrapwheneveraMACaddressisremoved

Toverifytheconfiguration:
Cat1#Showmacaddresstablenotificationinterfacef0/18
MACNotificationFeatureisEnabledontheswitch
Interface
MACAddedTrap MACRemovedTrap

FastEthernet0/18
Enabled
Enabled
Cat1#Showmacaddresstablenotification
Cat1#shmacaddresstablenotification
MACNotificationFeatureisEnabledontheswitch
IntervalbetweenNotificationTraps:1800secs
NumberofMACAddressesAdded:0
NumberofMACAddressesRemoved:0
NumberofNotificationssenttoNMS:0
MaximumNumberofentriesconfiguredinHistoryTable:150
CurrentHistoryTableLength:0
MACNotificationTrapsareEnabled
HistoryTablecontents

Task21
OptimizeCat1usingthefollowingpolicies:
Cat1shouldbeconfiguredsuchthatitsmemoryresourcesintheswitchare
optimizedforrouting.

www.ccieuniversity.com

Switchdatabasemanagement(SDM)aretemplatesthatcanbeconfiguredto
allocatememoryresourcesintheswitchforaspecificfeaturedependingonwhatthe
switchisusedforinagivennetwork.
Aswitchcanbeconfiguredtouseoneofthefollowingtemplates:

AccessUsedforQOSclassificationandSecurity.
Routing Usedforrouting
VlanDisablesroutingandsetstheswitchtobealayer2switch.
Extendedmatchreformatsroutingmemoryspacetoallow144bitlayer3
TCAMsupportneededforWCCPand/ormultipleVRFinstances.

On Cat1
Cat1(config)#Sdmpreferrouting
Youmustrebootforthesesettingstotakeeffect.

ToVerifytheconfiguration:
On Cat1
Cat1#Showsdmprefer
Thecurrenttemplateis"desktoprouting"template.
Theselectedtemplateoptimizestheresourcesin
theswitchtosupportthisleveloffeaturesfor
8routedinterfacesand1024VLANs.
numberofunicastmacaddresses:
3K
numberofIPv4IGMPgroups+multicastroutes:1K
numberofIPv4unicastroutes:
11K
numberofdirectlyconnectedIPv4hosts:
3K
numberofindirectIPv4routes:
8K
numberofIPv4policy basedroutingaces:
512
numberofIPv4/MACqosaces:
512
numberofIPv4/MACsecurityaces:
1K

On Cat2
Cat2#Shsdmprefer
Thecurrenttemplateis"desktopdefault"template.
Theselectedtemplateoptimizestheresourcesin
theswitchtosupportthisleveloffeaturesfor

www.ccieuniversity.com

8routedinterfacesand1024VLANs.
numberofunicastmacaddresses:
6K
numberofIPv4IGMPgroups+multicastroutes:1K
numberofIPv4unicastroutes:
8K
numberofdirectlyconnectedIPv4hosts:
6K
numberofindirectIPv4routes:
2K
numberofIPv4policybasedroutingaces:
0
numberofIPv4/MACqosaces:
512
numberofIPv4/MACsecurityaces:
1K
Notethedifferenceinmemoryallocationisrevealedifthebufferallocationof Cat2
iscomparedtothe Cat1.

Task22
CreateVLANs30,31and32on Cat1 andensurethattheseVLANscannottraversethe
trunklinkbetween Cat1andCat2.

BydefaultatrunkportsendsandreceivestrafficfromallVLANs,however,agiven
VLANorVLANscanberemovedfromthetrunklinkinordertopreventtrafficfrom
thatVLAN/sfromtraversingoverthetrunk.

On Cat1
Cat1(config)#Vlan3032
BeforeconfiguringthetaskwehavetochecktoseeiftheVLANsthatwejustcreated
cantraversethetrunklink.
Cat1#Showinterfacetrunk
PortModeEncapsulationStatusNativevlan
Fa0/19onisltrunking1
Fa0/20onisltrunking1
PortVlansallowedontrunk
Fa0/19 14094
Fa0/2014094
PortVlansallowedandactiveinmanagementdomain
Fa0/19 1,12,3032,34,56
Fa0/20 1,12,3032,34,56

www.ccieuniversity.com

PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/19 1,12,34,56
Fa0/20 1
NoteVlans3032areprunedbecausetheseVLANshave
NOPortmembership
ToremovethoseVLANsfromthetrunklinks:

OnBothSwitches
Switch(config)#Interfacerangef0/1920
Switch(configifrange)#Switchporttrunkallowedvlanexcept30,31,32
Noteif anEtherChannelwascreated,thecommandhadtobeconfigureddirectly
under theportchannelinterface.

ToVerifytheconfiguration:
On Cat1
Cat1#Showinttrunk
PortMode
EncapsulationStatusNativevlan
Fa0/19onisltrunking1
Fa0/20onisltrunking1
PortVlansallowedontrunk
Fa0/19129,334094
Fa0/20129,334094

NoteVLANs30 32areremovedfrom thetrunk

PortVlansallowedandactiveinmanagementdomain
Fa0/19 1,12,34,56
Fa0/20 1,12,34,56
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191,12,34,56
Fa0/20 1
NotetheoptionsthatcanbeusedwithSwitchporttrunkallowedVLANcommand
are:Remove,add,all,andexcept.
TheSwitchporttrunkallowedvlanremove30,31,32commandcouldaccomplishthe
sametask.

www.ccieuniversity.com

Task23
ConfigureCat1sportF0/15andF0/16suchthatwhenclientPCsconnecttotheseports,
theyautomaticallybecomememberofagivenVLAN.Cat1shouldbeconfiguredtouse
10.1.1.1astheprimaryand10.1.1.2asthesecondaryVMPSserver.Ensurethatthelocal
switchreconfirmstheVLANmembershipeveryhalfhourandiftheVMPScannotbe
contacted,thelocalswitchwillretry5timesbeforeconsideringtheVMPSunavailable.

VMPS:
The3550switchcantbesetupasaVMPSserver,butitcanbeconfiguredasa
VMPSclient.
TheclientcommunicateswiththeVMPSthroughVlanQueryProtocol(VQP).
WhenaVMPSreceivesaVQPfromtheclient,itsearchesitsdatabaseforaMAC
toVLANmapping,andifthemappingisfound,itconveystheVLANinformation
totheclientandthentheclientassignsthatgivenVLANtotheportthattheclient
isconnectedto.
TheVMPScanoperateinSecuremode,whichmeansthatifaMACtoVLAN
mappingcannotbefoundinitsdatabase,theVMPSwillsendaportshutdown
messagetotheclientandtheclientwillshutdownthatgivenport,however,ifthe
VMPSisnotconfiguredinasecuremode,itwillsendaccessdenymessage,andthe
clientwillconstantlymonitortheportandwillrejectalltrafficfromthatgiven
port.
TheVMPSclientperiodicallyreconfirmstheVLANmembershipinformation
receivedfromtheVMPSserver.Bydefaultthisisperformedevery60minutes,this
intervalcanbechangedusingVMPSreconfirmglobalconfigcommand.
IftheVMPSclientcantcontacttheVMPSserver,itwillretrytoestablishthat
communicationthreetimesandthisvaluecanbechangedusingvmpsretry
commandintheglobalconfigmode.
ThedatabaseisinformofanASCIIfilesavedonaTFTPserver,whichtheVMPS
serveraccesses.

On Cat1
Beforeconfiguringthistask weshouldchecksomeofthedefaultvalues:
Cat1#Showvmps
VQPClientStatus:

www.ccieuniversity.com

VMPSVQPVersion:1
ReconfirmInterval:60min
ServerRetryCount:3
VMPSdomainserver:
Reconfirmationstatus

VMPSAction:
NoDynamicPort
VMPSVQPversionisversion1,andthereconfirmationisatitsdefaultvalueof60
minutes,andtheretryvalueissetto3.TherearenoVMPSservers.
Cat1(config)#intrangef0/1516
Cat1(configifrange)#switchportmodeaccess
Cat1(configifrange)#switchportaccessvlandynamic
Cat1(configifrange)#noshut
TheabovecommandsetsportsF0/15andF0/16toVLANdynamic,whichmeansthatthey
willacquiretheirVLANinformationdynamically.
Cat1(config)#vmpsreconfirm30
Cat1(config)#vmpsretry5
Theabovetwocommandsconfigurethereconfirmationintervalto30minutesandthe
retrycounterto5.
Cat1(config)#vmpsserver10.1.1.1primary
Cat1(config)#vmpsserver10.1.1.2
ThesecommandsconfiguretheprimaryandthesecondaryVMPSservers.

Toverifytheconfiguration:
Cat1#Showvmps
VQPClientStatus:

VMPSVQPVersion:1
ReconfirmInterval: 30min
ServerRetryCount: 5
VMPSdomainserver:10.1.1.2
10.1.1.1(primary,current)
Reconfirmationstatus

VMPSAction:
NoDynamicPort

www.ccieuniversity.com

Task24
PortF0/17 on Cat1 isconnectedtoaCisco7960IPPhone.Voicetrafficthatoriginates
fromthephoneistaggedwithaCoSof5.
APCisconnectedtothe7960IPPhonewhichisgeneratingtrafficwithCoSof3.Ensure
thatthedatatrafficbelongstoVLAN3andtheVoicetrafficbelongstoVLAN5.The
trafficoriginatedbythe7960IPPhoneshouldmaintainitsCoSvalue,whereasthe
trafficthatoriginatedfromthePCconnectedtothe7960IPPhoneshouldberewritten
withaCoSof1.

On Cat1
Cat1(config)#Mlsqos
Cat1(config)#InterfaceF0/17
Cat1(configif)#SwitchportaccessVlan3
Cat1(configif)#SwitchportvoiceVlan 5
Cat1(configif)#Switchportpriorityextendcos1
Cat1(configif)#Mlsqostrustcos
Cat1(configif)#Noshut
Whenthephonegetsconnectedtotheswitchitwillforman802.1qtrunklink.The
trafficdestinedtothePCwillbecarriedintheaccessVLAN,whereasthetraffic
destinedforthe7960IPPhonewillbecarriedinVoiceVLAN.
Bydefaultthe3550doesntprocesstheCoSvalueandrewritesallframeswitha
CoSvalueof0.ToconfigurethephonesuchthatitprocessestheCoSvalues,the
QOSmustbeenabledgloballyusingthemlsqoscommand.
ToconfiguretheswitchsoittruststheincomingCoSvaluefromthe7960IPPhone
themlsqostrustcoscommandisused.
SincethePCconnectedtotheIPPhonecansendtraffictothePhonewithanyCos
valueandthephonewantstoensurethatthevoicetrafficthatitgeneratesgetbetter
priority,itoverridestheCoSforalltrafficthatisoriginatedbythePC.Inthistask
wehavetoconfiguretheswitchsuchthatitrewritesthetrafficwithaCoSof1,
therefore,theSwitchportpriorityextendedcos1commandisused.

Task25
Configuretrunkingbetween Cat1andCat2suchthatVLAN12doesnotgettagged
whenthetrafficforthisVLANtraversesthetrunk.

NotethetrunkingencapsulationonthetrunklinksshouldhavebeenDOT1Qinthe
CCIElab,whenconfiguringagivensection,theentiresectionshouldbereadbefore
configuringtheindividualtaskswithinthatsection.
WhenatrunkisconfiguredwithDot1q,itcanreceivebothtagged anduntagged

www.ccieuniversity.com

traffic.Bydefault,theswitchforwardsuntaggedtrafficinthenativeVLANONLY.
IfagivenVLANshouldNOTbetaggedasittraversesthetrunklinkthen,that
VLANshouldbesetasthenativeVLAN.
WhenthenativeVLANischanged,ensurethatthechangeisconfiguredonboth
switchesorthetrunklinkwillgodown.

OnBothSwitches
(config)#InterfacerangeF0/1920
(configifrange)#Switchporttrunkencapdot1q
(configifrange)#Switchportmodetrunk

ToVerifytheconfiguration:
On Cat1
PortModeEncapsulationStatusNativevlan
Fa0/19on802.1qtrunking1
Fa0/20on802.1qtrunking1
PortVlansallowedontrunk
Fa0/19129,334094
Fa0/20129,334094
PortVlansallowedandactiveinmanagementdomain
Fa0/191,3,12,34,56
Fa0/201,3,12,34,56
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191,3,12,34,56
Fa0/201
ToconfigurethenativeVLAN:

OnBothSwitches
(config)#InterfacerangeF0/1920
(configifrange)#SwitchporttrunknativeVLAN12

Toverifytheconfiguration:
On Cat1
Cat1#Showinterfacetrunk

www.ccieuniversity.com

PortModeEncapsulationStatus
Fa0/19on
802.1qtrunking
Fa0/20on802.1qtrunking

Nativevlan
12
12

PortVlansallowedontrunk
Fa0/19129,334094
Fa0/20129,334094
PortVlansallowedandactiveinmanagementdomain
Fa0/19 1,3,12,34,56
Fa0/201,3,12,34,56
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191,3,12,34,56
Fa0/201

On Cat2
Cat2#Showinterfacetrunk
PortModeEncapsulationStatus
Nativevlan
Fa0/5on802.1qtrunking1
Fa0/19on802.1qtrunking 12
Fa0/20on802.1qtrunking 12
PortVlansallowedontrunk
Fa0/514094
Fa0/19129,334094
Fa0/20129,334094
PortVlansallowedandactiveinmanagementdomain
Fa0/51,3,12,3032,34,56
Fa0/191,3,12,34,56
Fa0/201,3,12,34,56
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/51,3,12,3032,34,56
Fa0/191,12,34
Fa0/20none

Task26
ConfigureMultiinstanceofSpanningTreeontheswitchesusingthefollowspolicy:

www.ccieuniversity.com

ThereshouldbetwoinstancesofSTP,instance1and2
Instance1shouldhandleVLANs12and34
Instance2shouldhandleVLAN56
AllfutureVLANsshoulduseinstance0
Instance1shoulduseF0/19
Instance2shoulduseF0/20
Cat1shouldbetherootbridgeforthefirstinstance
Cat2shouldbetherootbridgeforthesecondinstance
Thenameofthisconfiguration shouldbeCCIE
Therevisionnumbershouldbe1

OnBothSwitches
ThedefaultmodeforspanningtreeisPVST,thefollowingShowcommandverifies
thisinformation:
Showspanningtreesummary
Switchisinpvstmode
Rootbridgefor:none
ExtendedsystemIDisenabled
(Therestoftheoutputisomitted)

OnBothSwitches
(config)#Spanningtreemodemst
ThiscommandchangesthemodeoftheswitchtoMST.
(config)#Spanningtreemstconfiguration
(configmst)#Revision1
(configmst)#NameCCIE
(configmst)#Instance1vlan 12,34
(configmst)#Instance2vlan56
ThefirstcommandallowsustoenterintheMSTconfigurationmode.Thesecond
commandspecifiestheconfigurationrevisionnumbertherangeforthisnumberis
165535.Thethirdcommandspecifiesthenameforthisconfigurationinthiscase
CCIE.TheforthandfifthcommandsmaptherequestedVLANstothespecified
instances,MSTsupports16instances,bydefaultallthefutureVLANswillbe
assignedtoinstance0,instance0isthecatchallinstance).

Toverifythisconfiguration:

www.ccieuniversity.com

OnbothSwitches
#Showspanningtreemstconfiguration
Name[CCIE]
Revision1
InstanceVlansmapped

0111,1333,3555,574094
1
12,34
256
Noteinstance0handlestherestoftheVLANsthatarenotassignedtoagiven
instanceinstance0isthecatchallinstance.

ToVerifytheconfiguration beforeconfiguringthenextportionofthe
task:
On Cat1
Cat1#Showspanningtreebridge
Hello Max Fwd
MSTInstanceBridgeID
Time Age Dly Protocol

MST0
32768(32768,0) 0019.56db.9400 2
20
15
mstp
MST1
32769(32768,1) 0019.56db.9400 2
20
15
mstp
MST2
32770(32768,2) 0019.56db.9400 2
20
15
mstp
NotethiscommanddisplaystheBIDforyourswitch,andinsteadofassigningaBID
toeachVLAN,thereisaBIDforeachinstance.

On Cat1
Cat1#Showspanningtreeroot
Root
Hello Max
MSTInstanceRootID
Cost
Time Age

MST0
32768 0019.56db.9400
0
220
MST1
327690019.56db.9400
0220
MST2
327700019.56db.9400
0
2
20

Fwd
DlyRootPort

15
15
15

TheabovecommanddisplaystheBIDoftherootbridgefordifferentinstances.
NoteinthiscaseCat1 istherootforallinstances.

www.ccieuniversity.com

On Cat1
Cat1(config)#Spanningtreemst1priority0
Cat1(config)#Spanningtreemst2priority4096

On Cat2
Cat2(config)#Spanningtreemst1priority4096
Cat2(config)#Spanningtreemst2priority0
Theabovecommandswillchangetheswitchpriorityandmakeitmorelikelythat
Cat1willbechosenastherootswitchforinstance1and Cat2 willbechosenasthe
rootbridgeforinstance2.
Thisnumbermustbeinincrementsof4096.Rememberthelowervaluehashigher
preference.

Toverifytheconfiguration:
On Cat1
Cat1#Showspanningroot
Root
Hello Max Fwd
MSTInstance
RootID
Cost
Time Age Dly

MST0
32768 0019.56db.9400
0 2
20 15
MST1
1 0019.56db.9400
0 2
20 15
MST2
2 001a.2f0a.2000 200000
2
20 15

RootPort

Fa0/19

Notethelocalswitch(Cat1)istherootbridgeforinstance0&1,whereas,Cat2 is
therootforinstances2.

On Cat2
Cat2#Showspanningroot
Root
Hello Max Fwd
MSTInstance
RootID
Cost
Time Age Dly

MST0327680019.56db.9400022015

RootPort

Fa0/19

MST110019.56db.9400 2000002
2015Fa0/19
MST2
2 001a.2f0a.2000
0 2
20
15
NoteCat2 istherootbridgeforinstance2,whereas,Cat1istherootforinstances
0and1.

www.ccieuniversity.com

Toconfigurethelastportionofthistask,portpriorityfeatureisusedasfollows:

OnBothSwitches
(config)#IntF0/19
(configif)#Spanningtreemst1portpriority0
(configif)#Spanningtreemst2portpriority128

Highpriority

(config)#IntF0/20
(configif)#Spanningtreemst1portpriority128
(configif)#Spanningtreemst2portpriority 0
InthistaskPortpriorityisusedwhenselectinganinterfacetoputintothe
forwardingstateforagiveninstancealowervaluehasahigherpriority.Inthis
caseportF0/19willbeusedbyalltheVLANsthatareassignedtoinstances0&1,
becauseithasahigherpriority(Lowervalue),andinstance2 willuseportF0/20
becauseithasbeenconfiguredwithahigherpriority(Lowervalue).

Toverifytheconfiguration:
On Cat1
Cat1#Showspanningtreeintf0/19
MstInstanceRoleSts
CostPrio.NbrType

MST0
DesgFWD200000128.21
P2p
MST1
DesgFWD200000128.21
P2p
MST2
AltnBLK200000128.21
P2p
Cat1#Shspanningtreeintf0/20
MstInstanceRoleStsCostPrio.NbrType

MST0
Desg FWD 200000128.22P2p
MST1DesgFWD200000128.22P2p
MST2
RootFWD200000128.22
P2p

On Cat2
Cat2#Showspanningtreeintf0/19
MstInstanceRoleStsCostPrio.NbrType

www.ccieuniversity.com


MST0
Root FWD200000128.21P2p
MST1RootFWD2000000.21P2p
MST2DesgFWD 200000128.21P2p
Cat2#Shspanningtreeintf0/20
MstInstanceRoleStsCostPrio.NbrType

MST0
Altn BLK 200000 128.22P2p
MST1AltnBLK200000128.22P2p
MST2DesgFWD2000000.22P2p
Noteinstances0&1isblockedonportF0/20butforwardedonF0/19andinstance
2isblockedoninterfaceF0/19andforwardedonF0/20.
Task27
TheITdepartmentdecidedtostopmonitoringportF0/14fromTask13,youhave
receivedanewrequesttomonitorportF0/14on Cat1 buttheprotocolanalyzeris
connectedtoportF0/18on Cat2. Configuretheswitchestoaccommodatethisrequest.

On Cat1
Cat1(config)#nomonitorsession1
Cat1(config)#Vlan90
Cat1(configvlan)#Remotespan
Cat1(configvlan)#Exit
ThecreationofthisVLANcanonlybedoneintheglobalconfigurationmode,
becausethisistheonlymodethatallowsustosettheVLANasremotespan.Ensure
thatthisVLANispropagatedtoCat4.

Toverifytheconfiguration:
On Cat1:
Cat1#Sh vlanbrie
VLANNameStatusPorts

1defaultactiveFa0/7,Fa0/8,Fa0/9,Fa0/10

www.ccieuniversity.com

Fa0/11,Fa0/12,Fa0/13,Fa0/14
Fa0/18,Fa0/21,Fa0/22,Fa0/23
Fa0/24,Gi0/1,Gi0/2
3VLAN0003activeFa0/17
12VLAN0012activeFa0/1,Fa0/2
30VLAN0030active
31VLAN0031active
32VLAN0032active
34VLAN0034activeFa0/3,Fa0/4
56VLAN0056activeFa0/5,Fa0/6
90VLAN0090active
EnsurethatthisVLANispropagated
(Therestoftheoutputisomitted)
toCat2

On Cat2
Cat2#Shvlanbrie
VLANName
StatusPorts

1default
activeFa0/1,Fa0/2,Fa0/3,Fa0/4
Fa0/6,Fa0/7,Fa0/8,Fa0/9
Fa0/10,Fa0/11,Fa0/12,Fa0/13
Fa0/14,Fa0/15,Fa0/16,Fa0/17
Fa0/18,Fa0/21,Fa0/22,Fa0/23
Fa0/24,Gi0/1,Gi0/2
3VLAN0003active
12VLAN0012active
30VLAN0030
active
31VLAN0031active
32VLAN0032active
34VLAN0034active
56VLAN0056active
90VLAN0090active
NotetheVLANispropagated.
(Therestoftheoutputisomitted)

On Cat1
Cat1#Showvlanremotespan
RemoteSPANVLANs

90

On Cat2
Cat2#Showvlan remotespan

www.ccieuniversity.com

RemoteSPANVLANs

90
NoteVLAN90shouldbedisplayedasremotespanonbothswitches.

On Cat1
Cat1(config)#Monitorsession1sourceinterfaceF0/14
Cat1(config)#Monitorsession1destinationremotevlan90

Toverifytheconfiguration:
On Cat1
Cat1#Show monitorsession1
Session1

Type
:RemoteSourceSession
SourcePorts
:
Both
:Fa0/14
DestRSPANVLAN: 90

On Cat2
Cat2(config)#Monitorsession1sourceremotevlan90
Cat4(config)#Monitorsession1destinationinterfaceF0/18
PortF0/18iswheretheprotocolanalyzerisconnected.

Toverifytheconfiguration:
On Cat2
Cat2#Shmonitorsession1
Session1

Type:RemoteDestinationSession
SourceRSPANVLAN:90
DestinationPorts:Fa0/18

www.ccieuniversity.com

Encapsulation:Native
Ingress:Disabled
RSPANextendsSPANbyenablingremotemonitoringofmultipleswitchesacrossyour
network.ThetrafficforRSPANtraversesoverauserdefinedRSPANVLAN(remote
vlan),inthiscaseVLAN90.TheSPANtrafficfromportF0/14isreflectedtoVLAN90
(TheRSPANVLAN)andthenforwardedoverthetrunktoportF0/18anRSPAN
destination.

Task 28
ConfigurethehostnameofthethirdswitchtobeCat3.

OnthethirdSwitch
Switch(config)#HostnameCat3

Task29
ConfigureportsF0/21andF0/22on Cat3andCat1astrunklinksusinganindustry
standardprotocol,theselinksshouldappeartoSTPasasinglelink.Ifoneofthelinks
fails,thetrafficshouldusetheotherlinkwithoutanyinterruption.

EtherChannelsprovidethefollows:
Faulttolerant,highspeedlinksbetweenswitchesandrouters.
EtherChannelprovidesanautomaticrecoveryforthelossofalinkby
redistributingthetrafficacrosstheremaininglink/s.
STPwillnotblockoneofthelinksinthebundlebecausetoSTP,thebundlelooks
likeasinglelink.
Upto8linkscanbecombinedtoprovidemorebandwidth.
Thelinkswithinthebundlemusthavethesamecharacteristicssuchasduplexing,
speedandetc.
EtherChannelcanbeconfiguredaslayer2orlayer3.
WithLayer3,alogicalinterface(PortChannel)isstaticallyconfiguredandall
Layer3configurationsareperformedunderthatinterface.
WithLayer2,thelogicalinterfaceiscreatedautomatically.
WithbothLayer2andLayer3,physicalinterfacesmustbemanuallyassignedto
thelogicalinterfaceusingchannelgroupconfigurationcommand.
EtherChannelscanbeconfiguredautomaticallyusingPortaggregationprotocol
(PAgP)orLinkAggregationprotocol(LACP).
PAgPisaCiscoproprietaryprotocol,whereasLACPisanindustrystandard

www.ccieuniversity.com

IEEE802.3adprotocol.
SwitchescanbeconfiguredtousePAgPbyconfiguringtheminAUTOor
DESIRABLEmode.
SwitchescanbeconfiguredtouseLACPbyconfiguringtheminACTIVEor
PASSIVEmode.
IftheswitchesareconfiguredinONmode,theywillnotexchangeLACPor
PAgPpackets.
Thereare5modesthattheswitchescanbeconfiguredin:
ONForcestheinterfaceintoanEtherChannelwithoutPAgPorLACPpackets,
bothswitchesmustbeconfiguredinONmodefortheEtherChanneltobe
established.
ACTIVEUsedinLACP,theswitcheswillactivelynegotiateanEtherChannel
link.
PASSIVEUsedinLACP,itplacestheinterfaceinapassivenegotiationmode
whereitonlyrespondstoLACPpacketsthatitreceives.Inthismodetheswitch
willnotstartthenegotiationprocessthissettingminimizesthetransmissionof
LACPpackets.
AUTOUsedinPAgP,itplacestheinterfaceinapassivenegotiationmodeIt
onlyrespondstoPAgPpacketsthatitreceives.Inthismodetheswitchwillnot
startthenegotiationprocessthissettingminimizesthetransmissionofPAgP
packets.
DESIRABLEUsedinPAgP,theswitcheswillactivelynegotiatean
EtherChannellink.
ThefollowingtableisveryimportantwhenconfiguringEtherChannels:
Switchoneisconfiguredas Switchtwoisconfiguredas WillanEtherChannel
beestablished?
Desirable
Desirable
YES
Desirable
Auto
YES
Auto
Auto
NO
Active
Active
YES
Active
Passive
YES
Passive
Passive
NO
BeforeconfiguringEtherChannel,youshouldchecktoensurethattheinterfacesare
configuredwiththesamecharacteristics.

On Cat1andSwitch3
(config)#Intrangef0/2122

www.ccieuniversity.com

(configifrange)#Switchporttrunkencapdot1q
(configifrange)#Switchportmodetrunk
(configifrange)#Channelgroup1mode on
(configifrange)#noshut
Notetheswitchwilldisplaythefollowingmessagethatthelogicalinterfacewillbe
created.
CreatingaportchannelinterfacePortchannel1

Toverifytheconfiguration:
On Cat1
Cat1#Showinttrunk
Port
ModeEncapsulationStatusNativevlan
Fa0/19on802.1qtrunking112
Fa0/20on802.1qtrunking112
Po1on802.1qtrunking1
PortVlansallowedontrunk
Fa0/19129,334094
Fa0/20129,334094
Po114094
PortVlansallowedandactiveinmanagementdomain
Fa0/19 1,3,12,34,56,90
Fa0/20 1,3,12,34,56,90
Po1
1,3,12,3032,34,56,90
PortVlansinspanningtreeforwardingstateandnotpruned
Fa0/191,3,12,34,90
Fa0/201,56
Po11,3,12,3032,34,56,90

OnCat3
Cat3#Shinttrunk

PortModeEncapsulationStatusNativevlan
Po1
on802.1qtrunking1
PortVlansallowedontrunk

www.ccieuniversity.com

Po114094
PortVlansallowedandactiveinmanagementdomain
Po11
PortVlansinspanningtreeforwardingstateandnotpruned
Po1
1

On Cat1
Cat1#Showspanningtreeintf0/21
MstInstanceRoleStsCostPrio.NbrType

MST00DesgFWD100000128.616P2pBound(STP)
MST01BounFWD100000128.616P2pBound(STP)
MST02BounFWD100000128.616P2pBound(STP)
Cat1#Showspanningtreeintf0/22
MstInstanceRoleStsCostPrio.NbrType

MST00DesgFWD100000128.616P2pBound(STP)
MST01BounFWD100000128.616P2pBound(STP)
MST02BounFWD100000128.616P2pBound(STP)

OnCat3
Cat3#Showspanningtreeintf0/21
VlanRoleStsCostPrio.NbrType

VLAN0001RootFWD12128.65P2p
Cat3#Showspanningtreeintf0/22
Vlan
RoleStsCostPrio.NbrType

VLAN0001RootFWD12128.65P2p
Noteallinterfacesareinforwardingstatebecausetospanningtree,theport
channelappearsasasingleinterface.
Ashowetherchannel1detailcommandcanrevealthattheinterfacesareworking
inthebundle.

www.ccieuniversity.com

Task30
EnsurethattheEtherChannelcreatedinthepreviousstepusesdestinationMAC
addressestoloadbalancethetrafficload.

Loadbalancingcanbedonebasedonthefollowing:
SourceMACaddressPacketsforwardedtoanEtherChannelaredistributedacrossthe
portsinthechannelbasedonthesourceMACaddressoftheincomingpackets.When
sourceMACaddressloadbalancingisenabled,theloaddistributionbasedonthesource
anddestinationIPaddressisalsoenabled
DestinationMACaddressIftheEtherChannelisbetweenarouterandaswitchand
sincetherouterhasasingleMACaddress,destinationbasedloadbalancingisthebest
way.

Toseethedefaultloadbalancing:
On Cat1
Notethedefaultloadbalancingisbasedonthe
SourceMacaddress
Cat1#showetherchannelload
EtherChannelLoadBalancingOperationalState(srcmac):
NonIP:SourceMACaddress
IPv4:SourceMACaddress
IPv6:SourceIPaddress
ToconfiguretheloadbalancingbasedonthedestinationMacaddresses:

On Cat1andCat3
(config)#portchannelloadbalancedstmac

Toverifytheconfiguration:
Cat1#showetherchannelload
EtherChannelLoadBalancingOperationalState(dstmac):
NonIP:DestinationMACaddress
IPv4:DestinationMACaddress
IPv6:DestinationIPaddress

www.ccieuniversity.com

Task31
ErasethestartupconfigurationandVLAN.datbeforeproceedingtothenextlab

www.ccieuniversity.com
Lab1HubnSpokeusingFramerelaymap
statements

R1

FrameRelay

R4

R2

R3

www.ccieuniversity.com

IPaddressingandDLCIinformationChart
Routers

IPaddress

LocalDLCI

Connectingto:

R1sFramerelayinterfaceS0/0

150.1.100.1/24

R2sFramerelayinterfaceS0/0

150.1.100.2/24

R3sFramerelayinterfaceS0/0

150.1.100.3/24

R4sFramerelayinterfaceS0/0

150.1.100.4/24

102
103
104
201
203
204
301
302
304
401
402
403

R2
R3
R4
R1
R3
R4
R1
R2
R4
R1
R2
R3

Task1
ConfigureaframerelayHubandspokeusingframerelaymapstatements.UsetheIP
addressingintheabovechart.
Disableinversearpsuchthattheroutersdonotgenerateinversearprequestpackets,and
ensurethatonlytheassignedDLCIsareused,theseDLCIsshouldbeasfollows:
OnR1:102,103and104shouldbeusedforconnectionstoR2,R3andR4
respectively.
OnR2,R3andR4:DLCIs201,301and401shouldbeusedonR2,R3andR4
respectivelyfortheirconnectiontoR1(Thehub).
InthefutureOSPFroutingprotocolwillberunningontheserouters,ensurethatthe
routerscanhandletheMulticasttrafficgeneratedbytheOSPFroutingprotocol.

www.ccieuniversity.com

OnR1
R1(config)#IntS0/0
R1(configif)#Ipaddress150.1.100.1255.255.255.0
R1(configif)#Encapsulationframe
R1(configif)#Framerelaymapip150.1.100.2102 b
R1(configif)#Framerelaymapip150.1.100.3103 b
R1(configif)#Framerelaymapip150.1.100.4104 b
R1(configif)#Noframerelayinversearp
R1(configif)#Noshut

Toverifytheconfiguration:
OnR1
R1#showframemap
Serial0/0(up):ip0.0.0.0dlci110(0x6E,0x18E0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci109(0x6D,0x18D0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci108(0x6C,0x18C0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci107(0x6B,0x18B0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci106(0x6A,0x18A0)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip0.0.0.0dlci105(0x69,0x1890)
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.2dlci102(0x66,0x1860),static,
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.3dlci103(0x67,0x1870),static,
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.4dlci104(0x68,0x1880),static,
broadcast,
CISCO,statusdefined,inactive

www.ccieuniversity.com

NoteDLCIs105,106,107,108,109and110aremappedto0.0.0.0IPaddress,these
maynotaffectUnicasttraffic,butitcanaffectMulticastand/orBroadcasttraffic,
therefore,theyshouldberemovedfromthemappingtable.Theclearframerelay
inarpcommandcanbeused,butitmaynotclearthetable,whereassavingthe
configurationandthenreloadingtherouterwilldefinitelyclearthe0.0.0.0
mappings.

OnR1
R1#Wr
R1#Reload
R1#Showframemap
Serial0/0(up):ip150.1.100.2dlci102(0x66,0x1860),static,
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.3dlci103(0x67,0x1870),static,
broadcast,
CISCO,statusdefined,inactive
Serial0/0(up):ip150.1.100.4dlci104(0x68,0x1880),static,
broadcast,
CISCO,statusdefined,inactive
OnR2
R2(config)#IntS0/0
R2(configif)#Ipaddress150.1.100.2255.255.255.0
R2(configif)#Encapsulationframe
R2(configif)#Framerelaymapip150.1.100.1 201b
R2(configif)#Noframerelayinversearp
R2(configif)#Noshut

Toverifytheconfiguration:
OnR2
R2#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms

www.ccieuniversity.com

R2#Showframemap
Serial0/0(up):ip150.1.100.1dlci201(0xC9,0x3090),static,
broadcast,
CISCO,statusdefined,active

OnR3
R3(config)#IntS0/0
R3(configif)#Ipaddress150.1.100.3255.255.255.0
R3(configif)#Encapsulationframe
R3(configif)#Framerelaymapip150.1.100.1301b
R3(configif)#Noframerelayinversearp
R3(configif)#Noshut

Toverifytheconfiguration:
OnR3
R3#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms

R3#Showframemap
Serial0/0(up):ip150.1.100.1dlci301(0x12D,0x48D0),static,
broadcast,
CISCO,statusdefined,active

OnR4
R4(config)#IntS0/0
R4(config)#Ipaddress150.1.100.4255.255.255.0
R4(config)#Encapsulationframe
R4(config)#Framerelaymapip150.1.100.1401b
R4(config)#Noframerelayinversearp
R4(config#Noshut

www.ccieuniversity.com

Toverifytheconfiguration:
OnR4
R4#Showframemap
Serial0/0(up):ip150.1.100.1dlci401(0x191,0x6410),static,
broadcast,
CISCO,statusdefined,inactive
R4#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/57/60ms

Task2
EnsurethateveryroutercanpingeveryIPaddressconnectedtothecloud.
Ensurethatthehub routerdoesnotreceiveredundantroutingtraffic.

OnR1
Totesttheexistingconfiguration:
R1#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
.....
Successrateis0percent(0/5)
Noteinamultipointframerelayconfiguration,twoissuesmustberesolvedbefore
anIPaddresscanbereached:
A. ThedestinationIPaddressmustbeintheroutingtablewithavalidnext
hop.
B. Theremustbeaframerelaymappingtothatdestination.
InthiscasethedestinationIPaddressisintheroutingtable,buttheframerelay

www.ccieuniversity.com

mappingismissing.Configuretheframerelaymappingasfollows:

OnR1
R1(config)#InterfaceS0/0
R1(configif)#Framerelaymapip150.1.100.1102

Toverifytheconfiguration:
OnR1
R1#Showframemap
Serial0/0(up):ip150.1.100.1dlci102(0x66,0x1860),static,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.100.2dlci102(0x66,0x1860),static,
broadcast,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.100.3dlci103(0x67,0x1870),static,
broadcast,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.100.4dlci104(0x68,0x1880),static,
broadcast,
CISCO,statusdefined,active
R1#Ping150.1.100.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/115/124ms

OnR2
R2(configif)#InterfaceS0/0
R2(configif)#Framerelaymapip150.1.100.3201
R2(configif)#Framerelaymapip150.1.100.4201
R2(configif)#Framerelaymapip150.1.100.2201

Toverifytheconfiguration:
OnR2
R2#Ping150.1.100.2

www.ccieuniversity.com

Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.2,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms

OnR3
R3(config)#InterfaceS0/0
R3(configif)#Framerelaymapip150.1.100.2301
R3(configif)#Framerelaymapip150.1.100.4301
R3(configif)#Framerelaymapip150.1.100.3301

Toverifytheconfiguration:
OnR3
R3#Ping150.1.100.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms

OnR4
R4(config)#InterfaceS0/0
R4(configif)#Framerelaymapip150.1.100.2401
R4(configif)#Framerelaymapip150.1.100.3401
R4(configif)#Framerelaymapip150.1.100.4401
Notewhenconfiguringtheframerelaymappingfromonespoketoanotherspoke,
thebroadcastargumentshouldnotbeused,ifthiskeywordisused,thehub
routerwillreceiveredundantroutingtraffic.ThiscanbeverifiedbyrunningRIPv2
andperformingadebugipripcommandonthehubrouter.

Toverifytheconfiguration:
OnR4
R4#Ping150.1.100.2
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.2,timeoutis2seconds:
!!!!!

www.ccieuniversity.com

Successrateis100percent(5/5),roundtripmin/avg/max=112/112/116ms
R4#
R4#Ping150.1.100.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/112/116ms
R4#Ping150.1.100.4
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.4,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/113/120ms

OnR3
R3#Ping150.1.100.2
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.100.2,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/112/116ms
R3#

Task3
ConfiguretherouterssuchthattheLMIstatusinquiriesaresentevery5secondsandFull
StatusLMIrequestsaresentevery 3cyclesinsteadof6.

BydefaultframerelayrouterssendtheirLMIStatusinquiries,every10seconds,
andafullstatusinquiryevery6th cycle(Every60seconds).Thestatusinquiriescan
bechangedusingtheKeepalivecommand,whereastheFramerelaylmi
n391dtecommandcanbeusedtochangetheintervalforthecompletestatus
inquiry.Notethestatusinquiriesaresentevery10seconds,andacompletestatus
inquiryissentevery6thcycleasfollows:

OnR1
R1#Debugframelmi

www.ccieuniversity.com

*Nov2419:59:57.407:Serial0/0(out):StEnq,myseq125,yourseen124,DTEup
*Nov2419:59:57.407:datagramstart=0x3F401ED4,datagramsize=14
*Nov2419:59:57.407:FRencap=0x00010308
*Nov2419:59:57.407:00759501010103027D7C
*Nov2419:59:57.407:
*Nov2419:59:57.411:Serial0/0(in):Status,myseq125,paksize14
*Nov2419:59:57.411:RTIE1,length1,type1
*Nov2419:59:57.411:KAIE3,length2,yourseq125,myseq125
*Nov2420:00:07.407:Serial0/0(out):StEnq,myseq126,yourseen125,DTEup
*Nov2420:00:07.407:datagramstart=0x3F6B0294,datagramsize=14
*Nov2420:00:07.407:FRencap=0x00010308
*Nov2420:00:07.407:00759501010103027E7D
*Nov2420:00:07.407:
*Nov2420:00:07.411:Serial0/0(in):Status,myseq126,paksize14
*Nov 2420:00:07.411:RTIE1,length1,type1
*Nov2420:00:07.411:KAIE3,length2,yourseq126,myseq126
*Nov2420:00:17.407:Serial0/0(out):StEnq,myseq127,yourseen126,DTEup
*Nov2420:00:17.407:datagramstart=0x3F400C14,datagramsize=14
*Nov2420:00:17.407:FRencap=0x00010308
*Nov2420:00:17.407:00759501010103027F7E
*Nov2420:00:17.407:
*Nov2420:00:17.411:Serial0/0(in):Status,myseq127,paksize14
*Nov2420:00:17.411:RTIE1,length1,type1
*Nov2420:00:17.411:KAIE3,length2,yourseq127,myseq127
*Nov2420:00:27.407:Serial0/0(out):StEnq,myseq128,yourseen127,DTEup
*Nov2420:00:27.407:datagramstart=0x3F6AF394,datagramsize=14
*Nov2420:00:27.407:FRencap=0x00010308
*Nov2420:00:27.407:00 75950101010302807F
*Nov2420:00:27.407:
*Nov2420:00:27.411:Serial0/0(in):Status,myseq128,paksize14
*Nov2420:00:27.411:RTIE1,length1,type1
*Nov2420:00:27.411:KAIE3,length2,yourseq128,myseq128
*Nov2420:00:37.407:Serial0/0(out):StEnq,myseq129,yourseen128,DTEup
*Nov2420:00:37.407:datagramstart=0x3F644ED4,datagramsize=14
*Nov2420:00:37.407:FRencap=0x00010308
*Nov2420:00:37.407:00759501010103028180
*Nov2420:00:37.407:
*Nov2420:00:37.411:Serial0/0(in):Status,myseq129,paksize14
*Nov2420:00:37.411:RTIE1,length1,type1
*Nov2420:00:37.411:KAIE3,length2,yourseq129,myseq129

www.ccieuniversity.com

*Nov2420:00:47.407:Serial0/0(out):StEnq,myseq130,yourseen129,DTEup
*Nov2420:00:47.407:datagramstart=0x3F6B03D4,datagramsize=14
*Nov2420:00:47.407:FRencap=0x00010308
*Nov2420:00:47.407:00759501010003028281
*Nov2420:00:47.407:
*Nov2420:00:47.419:Serial0/0(in):Status,myseq130,paksize59
*Nov2420:00:47.419:RTIE1,length1,type0
*Nov2420:00:47.419:KAIE3,length2,yourseq130,myseq130
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci102,status0x2
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci103,status0x2
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci104,status0x2
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci105,status0x0
*Nov2420:00:47.419:PVCIE0x7,length0x3,dlci106,status0x0
*Nov2420:00:47.423:PVCIE0x7,length0x3,dlci107,status0x0
*Nov2420:00:47.423:PVCIE0x7,length0x3,dlci108,status0x0
*Nov2420:00:47.423:PVCIE0x7,length0x3,dlci109,status0x0
*Nov2420:00:47.423:PVCIE0x7,length0x3,dlci110,status0x0
R1#
Notewhentheswitchreceivesthecompletestatusinquiry,itrespondsbackwithall
theDLCIsthatareconfiguredforthatgivenrouter.

Tochangethesetimers:
Onallrouters
(config)#InterfaceS0/0
(configif)#Keepalive5
(configif)#Framerelaylmin391dte3

Totesttheconfiguration:
Rx#DebugframeLMI
*Nov2420:13:52.411:Serial0/0(out):StEnq,myseq221,yourseen220,DTEup
*Nov2420:13:52.411:datagramstart=0x3F6AEFD4,datagramsize=14
*Nov2420:13:52.411:FRencap=0x00010308
*Nov2420:13:52.411:0075950101 010302DDDC
*Nov2420:13:52.411:
*Nov2420:13:52.415:Serial0/0(in):Status,myseq221,paksize14
*Nov2420:13:52.415:RTIE1,length1,type1
*Nov2420:13:52.415:KAIE3,length2,yourseq221,myseq221

www.ccieuniversity.com

*Nov2420:13:57.411:Serial0/0(out):StEnq,myseq222,yourseen221,DTEup
*Nov2420:13:57.411:datagramstart=0x3F400D54,datagramsize=14
*Nov2420:13:57.411:FRencap=0x00010308
*Nov2420:13:57.411:0075950101 010302DEDD
*Nov2420:13:57.411:
*Nov2420:13:57.415:Serial0/0(in):Status,myseq222,paksize14
*Nov2420:13:57.415:RTIE1,length1,type1
*Nov2420:13:57.415:KAIE3,length2,yourseq222,myseq222
*Nov2420:14:02.411:Serial0/0(out):StEnq,myseq223,yourseen222,DTEup
*Nov2420:14:02.411:datagramstart=0x3F6AF394,datagramsize=14
*Nov2420:14:02.411:FRencap=0x00010308
*Nov2420:14:02.411:0075950101 000302DFDE
*Nov2420:14:02.411:
*Nov2420:14:02.423:Serial0/0(in):Status,myseq223,paksize59
*Nov2420:14:02.423:RTIE1,length1,type0
*Nov2420:14:02.423:KAIE3,length2,yourseq223,myseq223
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci102,status0x2
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci103,status0x2
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci104,status0x2
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci105,status0x0
*Nov2420:14:02.423:PVCIE0x7,length0x3,dlci106,status0x0
*Nov2420:14:02.427:PVCIE0x7,length0x3,dlci107,status0x0
*Nov2420:14:02.427:PVC IE0x7,length0x3,dlci108,status0x0
*Nov2420:14:02.427:PVCIE0x7,length0x3,dlci109,status0x0
*Nov2420:14:02.427:PVCIE0x7,length0x3,dlci110,status0x0
Noteinitiallytheroutersendsouttwotype1inquiries,andthethirdmessagethat
theroutersendsoutismessagetype0,whichtellstheswitchtorespondwithallthe
DLCIsthatareconfiguredforthatgivenrouter.

Task4
Reconfiguretheroutersinafullmeshconfigurationandtest/verifytheconfiguration.In
thisconfigurationtherouterswillnotberunningaroutingprotocol.

Task5
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab2HubnSpokeusingFramerelayPoint
toPointconfiguration

R1

FrameRelay

R4

R2

R3

www.ccieuniversity.com

IPaddressingandDLCIinformationChart
Routers

IPaddress

LocalDLCI

Connectingto:

R1sFramerelayinterface

R2sFramerelayinterface

150.1.12.1/24
150.1.13.1/24
150.1.14.1/24
150.1.12.2/24

R3sFramerelayinterface

150.1.13.3/24

R4sFramerelayinterface

150.1.14.4/24

102
103
104
201
203
204
301
302
304
401
402
403

R2
R3
R4
R1
R3
R4
R1
R2
R4
R1
R2
R3

Task1
ConfiguretheroutersinahubandspokemannerusingtheIPaddressingintheabove
chart.
Disableinversearpsuchthattheroutersdonotgenerateinversearppackets,andensure
thatonlytheassignedDLCIsareused,theseDLCIsshouldbeasfollows:
OnR1:102,103and104shouldbeusedforconnectionstoR2,R3andR4
respectively.
OnR2,R3andR4:DLCIs201,301and401shouldbeusedonR2,R3andR4
respectivelyfortheirconnectiontoR1(Thehub).
TheseroutersshouldbeabletopingeveryIPaddresswithintheirIPaddressspace.

OnR1
R1(config)#InterfaceS0/0
R1(configif)#Encapframe
R1(configif)#Noshut
R1(configif)#Exit
R1(config)#InterfaceS0/0.12pointtopoint
R1(configsubif)#Ipaddress150.1.12.1255.255.255.0
R1(configsubif)#Framerelayinterfacedlci102
R1(configsubif)#Exit

www.ccieuniversity.com

R1(configsubif)#InterfaceS0/0.13pointtopoint
R1(configsubif)#Ipaddress150.1.13.1255.255.255.0
R1(configsubif)#Framerelayinterfacedlci 103
R1(configsubif)#Exit
R1(configsubif)#InterfaceS0/0.14pointtopoint
R1(configsubif)#Ipaddress150.1.14.1255.255.255.0
R1(configsubif)#Framerelayinterfacedlci104
R1(configsubif)#Exit

Toverifytheconfiguration:
OnR1
R1#Showframemap
Serial0/0.12(up):pointtopointdlci,dlci102(0x66,0x1860),broadcast
statusdefined,active
Serial0/0.14(up):pointtopointdlci,dlci104(0x68,0x1880),broadcast
statusdefined,active
Serial0/0.13(up):pointtopointdlci,dlci103(0x67,0x1870),broadcast
statusdefined,active
Notewhenframerelayisconfiguredinapointtopointmanneritsimportantto
understandthefollowingtwobehaviors:
A. Thereisnoneedtodisablesendinginversearppackets,becauseinversearp
isdisabledwhenframerelayisconfiguredinapointtopointmanner.
B. Noneedforframerelaymapping/s,becausetherecanonlybeanotherrouter
ontheotherendofthePVC,therefore,allIPaddresses(Thisincludesthe
localroutersIPaddress)arereachableaslongasthedestinationIPaddress
isintheroutingtablewithavalidnexthopIPaddress.

OnR2
R2(config)#IntS0/0
R2(configif)#Encapframe
R2(configif)#Noshut
R2(configif)#Exit
R2(config)#IntS0/0.21pointtopoint
R2(configsubif)#Ipaddress150.1.12.2255.255.255.0
R2(configsubif)#Framerelayinterfacedlci201
R2(configsubif)#Exit

www.ccieuniversity.com

Toverifyandtesttheconfiguration:
OnR2
R2#Showframemap
Serial0/0.21(up):pointtopointdlci,dlci201(0xC9,0x3090),broadcast
statusdefined,active
R2#Ping150.1.12.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.12.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
R2#Ping150.1.12.2
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.12.2,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms

OnR3
R3(config)#IntS0/0
R3(configif)#Encapframe
R3(configif)#Noshut
R3(configif)#Exit
R3(config)#IntS0/0.31pointtopoint
R3(configsubif)#Ipaddress150.1.13.3255.255.255.0
R3(configsubif)#Framerelayinterfacedlci301

Toverifyandtesttheconfiguration:
OnR3
R3#Showframemap
Serial0/0.31(up):pointtopointdlci,dlci 301(0x12D,0x48D0),broadcast
statusdefined,active
R3#Ping150.1.13.1

www.ccieuniversity.com

Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.13.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
R3#Ping150.1.13.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.13.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms

OnR4
R4(config)#IntS0/0
R4(configif)#Encapframe
R4(configif)#Noshut
R4(configif)#Exit
R4(config)#IntS0/0.41pointtopoint
R4(configsubif)#Ipaddress150.1.14.4255.255.255.0
R4(configsubif)#Framerelayinterfacedlci401

Toverifyandtesttheconfiguration:
OnR4
R4#Showframemap
Serial0/0.41(up):pointtopointdlci,dlci 401(0x191,0x6410),broadcast
statusdefined,active
R4#Ping150.1.14.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.14.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
R4#Ping150.1.14.4
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.14.4,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms

www.ccieuniversity.com

Task2
ReconfiguretheroutersinafullmeshconfigurationusingtheDLCIsintheIP
addressingandDLCIinformationchart.YoushoulduseanIPaddressingschemeof
yourchoicetoaccomplishthistask.

Task3
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab3 MixtureofPointtopointandMultipoint
framerelay

R1

FrameRelay

R4

R2

R3

www.ccieuniversity.com

IPaddressingandDLCIinformationChart
Routers

IPaddress

LocalDLCI

Connectingto:

R1sFramerelayinterface

R2sFramerelayinterface

150.1.123.1/24
150.1.123.1/24
150.1.14.1/24
150.1.123.2/24

R3sFramerelayinterface

150.1.123.3/24

R4sFramerelayinterface

150.1.14.4/24

102
103
104
201
203
204
301
302
304
401
402
403

R2
R3
R4
R1
R3
R4
R1
R2
R4
R1
R2
R3

Task1
Configureframerelayontheroutersasfollows:
R1:

Thisroutershouldbeconfiguredinapointtopointmannerforitsconnectionto
R4usingtheIPaddressingandDLCIinformationintheabovechart.
ThisroutershouldalsobeconfiguredforitsconnectiontoroutersR2andR3
usingtheIPaddressingandtheDLCIinformationintheabovechart.

R2:

ThisroutershouldbeconfiguredusingtheIPaddressingandtheDLCI
informationintheabovechart.Thisroutermustbeconfiguredinapointtopoint
mannerforitsconnectiontoR1.

R3:

ThisroutershouldbeconfiguredusingtheIPaddressingandtheDLCI
informationintheabovechart.ThisroutermustNOTbeconfiguredwithasub
interfaceforitsconnectiontoR1.

R4:

ThisroutershouldbeconfiguredusingtheIPaddressingandtheDLCI
informationintheabovechart.Thisroutermustbeconfiguredinapointtopoint
mannerforitsconnectiontoR1.

Disableinversearpsuchthattheroutersdonotgenerateinversearppackets,andensure
thatonlytheassignedDLCIsfortheirconnection/sareused.
TheseroutersshouldbeabletopingeveryIPaddresswithintheirIPaddressspace.

www.ccieuniversity.com

OnR1
R1(config)#IntS0/0
R1(configif)#Encapframe
R1(configif)#Noshut
R1(configif)#Exit
R1(configsubif)#IntS0/0.123multipoint
R1(configsubif)#Ipaddress150.1.123.1255.255.255.0
R1(configsubif)#Framerelaymapip150.1.123.2102b
R1(configsubif)#Framerelaymapip150.1.123.3103b
R1(configsubif)#Noframerelayinversearp
R1(config)#IntS0/0.14pointtopoint
R1(configsubif)#Ipaddress150.1.14.1255.255.255.0
R1(configsubif)#Framerelayinterfacedlci104

OnR2
R2(config)#IntS0/0
R2(configif)#Encapframe
R2(configif)#Noshut
R2(configif)#Exit
R2(config)#IntS0/0.21pointtopoint
R2(configsubif)#Ipaddress150.1.123.2255.255.255.0
R2(configsubif)#Framerelayinterfacedlci201
Notethereisnoneedtodisablesendinginversearp,becauseitsdisabledbydefault
inapointtopointconfiguration.

Totestandverifytheconfiguration:
OnR2
R2#Showframerelaymap
Serial0/0.21(up):pointtopointdlci,dlci201(0xC9,0x3090),broadcast
statusdefined,active
R2#Ping150.1.123.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.123.1,timeoutis2seconds:

www.ccieuniversity.com

!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/57/60ms

OnR3
R3(config)#IntS0/0
R3(configif)#Encapframe
R3(configif)#Ipaddress150.1.123.3255.255.255.0
R3(configif)#Framerelaymapip150.1.123.1301b
R3(configif)#Framerelaymapip150.1.123.2301
R3(configif)#Framerelaymapip150.1.123.3301
R3(configif)#Noframerelayinversearp
R3(configif)#Noshut

Toverifyandtesttheconfiguration:
OnR3
R3#Showframemap
Serial0/0(up):ip150.1.123.1dlci301(0x12D,0x48D0),static,
broadcast,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.123.2dlci301(0x12D,0x48D0),static,
CISCO,statusdefined,active
Serial0/0(up):ip150.1.123.3dlci301(0x12D,0x48D0),static,
CISCO,statusdefined,active

R3#Ping150.1.123.2
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.123.2,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/113/116ms
R3#Ping150.1.123.3
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.123.3,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms
R3#Ping150.1.123.1
Typeescapesequencetoabort.

www.ccieuniversity.com

Sending5,100byteICMPEchosto150.1.123.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms

OnR4
R4(config)#IntS0/0
R4(configif)#Encapframe
R4(configif)#Noshut
R4(configif)#Exit
R4(config)#IntS0/0.41pointtopoint
R4(configsubif)#Ipaddress150.1.14.4255.255.255.0
R4(configsubif)#Framerelayinterfacedlci401

Toverifyandtesttheconfiguration:
OnR4
R4#Showframemap
Serial0/0.41(up):pointtopointdlci,dlci401(0x191,0x6410),broadcast
statusdefined,active

R4#Ping150.1.14.1
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.14.1,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=56/56/60ms
R4#Ping150.1.14.4
Typeescapesequencetoabort.
Sending5,100byteICMPEchosto150.1.14.4,timeoutis2seconds:
!!!!!
Successrateis100percent(5/5),roundtripmin/avg/max=112/114/120ms

Task2
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab1PrefixLists

R1

R2
.1

.2
10.1.12.0/24

LabSetup:
TheF0/0interfaceofR1andR2shouldbeconfiguredinVLAN12.
ConfigureRIPv2onbothrouters,thesetworoutersshouldadvertisetheirdirectly
connectedinterfacesensurethatautomaticsummarizationisdisabled.

IPAddressing:
Routers

Interface/IPaddress

R1

F0/0=10.1.12.1/24
Lo0=1.1.1.1/8
Lo1=2.2.2.2/8
Lo2=3.3.3.3/8
Lo3=125.1.1.1/8
Lo4=128.1.1.1/16
Lo5=131.1.1.1/16
Lo6=191.1.1.1/16
Lo7=192.1.1.1/24
Lo8=195.1.1.1/24
Lo9=200.1.1.1/24
Lo10=223.1.1.1/24
Lo11=4.4.4.4/16
Lo12=5.5.5.5/24
Lo13=6.6.6.6/26
Lo14=132.1.1.1/24
Lo15=133.1.1.1/25
Lo16=193.1.1.1/25
Lo17=194.1.1.1/26
F0/0=10.1.12.2/24

R2

www.ccieuniversity.com

Task1
ConfigureR2suchthatONLYNetwork194.1.1.0/27isallowedinR2sroutingtable.

OnR2
R2(config)#ipprefixlistNet194seq5permit194.1.1.0/27
R2(config)#routerrip
R2(configrouter)#distributelistprefixNet194inf0/0
R2#cleariproute*
R2#Shiprouterip
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
NotetheIPPrefixlistonlyallowsnetwork194.1.1.0/26anddeniestherestofthe
networksinthroughitsF0/0interface.

Task2
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistNet194seq5permit194.1.1.0/27
R2(config)#routerrip
R2(configrouter)#Nodistributelistprefix Net194inf0/0

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0

www.ccieuniversity.com

R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03, FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task3
ConfigureR2suchthatitonlyallowsClassAnetworksthatarenotsubnetted.

OnR2
R2(config)#ipprefixlistClassAseq5permit0.0.0.0/1ge8le8
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassAinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip

www.ccieuniversity.com

R1.0.0.0/8[120/1]via10.1.12.1,00:00:01,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:01,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:01,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:01,FastEthernet0/0
ClassAnetworkareidentifiedasfollows:
Wherenidentifiesthenetworkbitsandhidentifiesthehostbits.

0nnnnnnnhhhhhhhhhhhhhhhhhhhhhhhh

Firstbitissetto0Thereforethereare7networkbits24hostbits
Initialbyte:0 127
126ClassAsexist(0and127arereserved)
16,777,214hostsoneachClassA

Notethemostsignificantbitofthefirstoctetissettoabinary0,therestofthe
bitsinthefirstoctetcanbezerosorones,therefore,ifthemostsignificantbitofthe
firstoctetis0itmustbeclassA.Theprefixlistpicksonthefirstbitbyusinga
/1prefixlength.

Task4
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistClassAseq5permit0.0.0.0/1ge8le8
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassAinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0

www.ccieuniversity.com

R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24 [120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1 subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task5
ConfigureR2suchthatitonlyallowsClassBnetworksthatarenotsubnetted.

OnR2
R2(config)#ipprefixlistClassBseq5permit128.0.0.0/2ge16le16
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassBinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip

www.ccieuniversity.com

R191.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0

10nnnnnnnnnnnnnnhhhhhhhhhhhhhhhh
Firsttwobitsaresetto10therefore,thereare14networkbitsleft
toidentifythenetworksandtheremaining16bitsidentifythehost
bits.
Initialbyte:128 191
16,384ClassBsexist
65,532hostsoneachClassB

Notethefirst&secondmostsignificantbitsofthefirstoctetissettoabinary10,
sincethefirsttwooctetsarereservedfornetworks,therestofthebitsinthefirst&
secondoctetcanbezerosorones,therefore,if thetwomostsignificantbitsofthe
firstoctetis10itmustbeclassB.Theprefixlistpicksonthefirsttwobitsby
usinga/2prefixlength,withanetworkaddressof128.0.0.0.Sincethetaskstates
thatitshouldONLYallowclassBnetworksthatareNOTsubnetted,theprefix
lengthspecifiesGE16andLE16.

Task6
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistClassBseq5permit128.0.0.0/2ge16le16
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassBinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip

www.ccieuniversity.com

R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task7
ConfigureR2suchthatitonlyallowsClassCnetworksthatarenotsubnetted.

OnR2
R2(config)#ipprefixlistClassCpermit192.0.0.0/3ge24le24
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassCinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2

www.ccieuniversity.com

R2#Shiprouterip
R223.1.1.0/24[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R 200.1.1.0/24[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:07,FastEthernet0/0

110nnnnnnnnnnnnnnnnnnnnnhhhhhhhh
Firstthreebitsof thefirstoctetisreservedas110Sincethefirst
threeoctetsbelongtonetworks,thereare21networkbitsleftto
identifythenetworksthereforetheremaining8bitsidentifythehost
bits
Initialbyte:192 223
2,097,152ClassCsexist
254hostsoneachClassC

Task8
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistClassCseq5permit192.0.0.0/3ge24le24
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassCinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R 3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0

www.ccieuniversity.com

R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1 subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1 subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task9
ConfigureR2suchthatitonlyallowsClassAnetworksthatareorarenotsubnetted.

OnR2
R2(config)#ipprefixlistClassAseq5permit0.0.0.0/1ge8le32
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassAinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip

www.ccieuniversity.com

R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
NoteinthiscasetheprefixlistpicksonclassA,withaprefixlengthofgreaterthan
orequal8andlessthanorequal32,whichmeansthatallclassAplusallclassA
networksthataresubnetted.

Task10
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistClassAseq5permit0.0.0.0/1ge8le32
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassAinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0

www.ccieuniversity.com

R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1] via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task11
ConfigureR2suchthatitonlyallowsClassBnetworksthatareorarenotsubnetted.

OnR2
R2(config)#ipprefixlistClassBseq5permit128.0.0.0/2ge16le32
R2(config)#routerrip
R2(configrouter)#distributelistprefixClassBinf0/0
R2#Cleariproute*
R2#Shiproute rip
R191.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R
132.1.1.0[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:05,FastEthernet0/0

www.ccieuniversity.com

Task12
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistClassBseq5permit128.0.0.0/2ge16le32
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassBinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1] via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

www.ccieuniversity.com

Task13
ConfigureR2suchthatitonly allowsClassCnetworksthatareorarenotsubnetted.

OnR2
R2(config)#ipprefixlistClassCseq5permit192.0.0.0/3ge24le32
R2(config)#Routerrip
R2(configrouter)#distributelistprefixClassCinf0/0
R2#cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R223.1.1.0/24[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:05,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:05,FastEthernet0/0

Task14
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistClassCseq5permit192.0.0.0/3ge24le32
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixClassCinf0/0
R2#Cleariproute*

www.ccieuniversity.com

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R
6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R
194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task15
ConfigureR2suchthatitonlyallowsnetworkswithaprefixlengthof25orgreaterinits
routingtable.

OnR2
R2(config)#ipprefixlistTSTseq5permit0.0.0.0/0ge25
R2(config)#routerrip

www.ccieuniversity.com

R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*
Noteinthiscasethecombinationofthepermit0.0.0.0/0andthege25tellsthe
routerthatanynetworkthathasaprefixlengthof25orgreaterisapermitted.

Toverifytheconfiguration:
OnR2
R2#Shiprouterip
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task16
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistTSTseq5permit0.0.0.0/0ge25
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip

www.ccieuniversity.com

R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03, FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task17
ConfigureR2suchthatitonlyallowsnetworkswithaprefixlengthof16orlessinits
routingtable.

OnR2
R2(config)#ipprefixlistTSTseq5permit0.0.0.0/0le16
R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*
Noteinthiscasethecombinationofthepermit0.0.0.0/0andthele16tellsthe
routerthatanynetworkthathasaprefixlengthof16orlessisapermitted.

www.ccieuniversity.com

Toverifytheconfiguration:
OnR2
R2#Shiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPF externaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R1.0.0.0/8[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
10.0.0.0/24issubnetted,1subnets
C10.1.12.0isdirectlyconnected,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:09,FastEthernet0/0

Task18
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistTSTseq5permit0.0.0.0/0le16
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*

www.ccieuniversity.com

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03, FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R 125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task19
ConfigureR2suchthatitonlyallowsnetworkswithaprefixlengthof16to25inits
routingtable.

OnR2
R2(config)#ipprefixlistTSTpermit0.0.0.0/0ge16le25

www.ccieuniversity.com

R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*

R2#Showiprouterip
R223.1.1.0/24 [120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0

Task20
Removethecommandsfrom theprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistTSTpermit0.0.0.0/0ge16le25
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*

Toverifytheconfiguration:

www.ccieuniversity.com

OnR2
R2#Showiprouterip
R1.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R2.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R3.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R223.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
4.0.0.0/16issubnetted,1subnets
R4.4.0.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R191.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
R5.5.5.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R200.1.1.0/24[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
6.0.0.0/27issubnetted,1subnets
R6.6.6.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R 128.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R125.0.0.0/8[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
R131.1.0.0/16[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
193.1.1.0/25issubnetted,1subnets
R193.1.1.0[120/1]via10.1.12.1,00:00:03,FastEthernet0/0
132.1.0.0/24issubnetted,1subnets
R132.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R192.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
133.1.0.0/25issubnetted,1subnets
R133.1.1.0[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R195.1.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
194.1.1.0/27issubnetted,1subnets
R194.1.1.0[120/1]via10.1.12.1,00:00:06,FastEthernet0/0

Task21
ErasethestartupconfigurationofR1andreloadthisrouter.Whentheroutercomesup,
copyandpastetheconfigurationfromtheCDprovidedforTask21
VerifythatR2isreceivingthefollowingroutesfromR1:
R2#Shiprouterip
10.0.0.0/8isvariablysubnetted,11subnets,7masks
R10.4.2.8/29[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.1.4/30[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.7.1.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R
10.7.0.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0

www.ccieuniversity.com

R10.7.3.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.7.2.0/24[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.3.16/28[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.4.32/27[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:04,FastEthernet0/0
R10.4.6.128/25[120/1]via10.1.12.1,00:00:04,FastEthernet0/0

Task22
ConfigureR2toONLYpermitthe10.7.0.0subnetsinitsroutingtableyoushould
configureoneprefixlisttoaccomplishthistask.

OnR2
R2(config)#ipprefixlistTSTpermit10.7.0.0/22ge23le24
R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*

Toverifytheconfiguration
OnR2
R2#Showiprouterip
10.0.0.0/24issubnetted,5subnets
R10.7.1.0[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R10.7.0.0[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R10.7.3.0[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
R10.7.2.0[120/1]via10.1.12.1,00:00:07,FastEthernet0/0
Notetheprefixlistchecksthefirst22bitstoensureamatch,then,thesubnetmask
mustbeGEto23andLE24,whichwillONLYpickonthefournetworksin
10.7.0.0thatR1isadvertising.

Task23
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

www.ccieuniversity.com

OnR2
R2(config)#NoipprefixlistTSTpermit10.7.0.0/22ge23le24
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*

Toverifytheconfiguration:

OnR2
R2#Showiprouterip
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
10.0.0.0/8isvariablysubnetted,11subnets,7masks
R10.4.2.8/29[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
C10.1.12.0/24isdirectlyconnected,FastEthernet0/0
R10.4.1.4/30[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.1.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.0.0/24 [120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.3.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.2.0/24[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.3.16/28[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.4.32/27[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.6.128/25[120/1]via10.1.12.1,00:00:09,FastEthernet0/0

Task24
ConfigureR2suchthatitONLYallowsthefollowingtwoprefixesinitsroutingtable:
10.4.4.32/27and10.4.5.64/26

www.ccieuniversity.com

OnR2
R2(config)#ipprefixlistTSTpermit10.4.4.0/23ge24le27
R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
10.0.0.0/8isvariablysubnetted,3subnets,3masks
R10.4.4.32/27[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:06,FastEthernet0/0
Notetheprefixliststartswith10.4.4.0/23,becausethefirst23bitsareidenticalin
bothprefixes,therefore,thebitsmustspecify/23.Thesubnetmaskofthenetwork
shouldbeGE26andLE27,whichpicksonlyonthetwoprefixes.

Task25
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistTSTpermit10.4.4.0/23ge24le27
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip

www.ccieuniversity.com

Codes:C connected,S static,RRIP,M mobile,BBGP


D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR, P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
10.0.0.0/8isvariablysubnetted,11subnets,7masks
R10.4.2.8/29[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
C10.1.12.0/24isdirectlyconnected,FastEthernet0/0
R10.4.1.4/30[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.1.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.0.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.3.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.2.0/24[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.3.16/28[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.4.32/27[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.6.128/25[120/1]via10.1.12.1,00:00:09,FastEthernet0/0

Task26
ConfigureR2toallowallsubnetsof10.4.0.0network.Youshouldbeveryspecificwhen
configuringtheprefixlist/s,youshouldNOTallowotherprefixesexcepttheonesinyour
routingtable.Useminimumnumberofprefixliststoaccomplishthistask.

OnR2
R2(config)#ipprefixlistTSTpermit10.4.0.0/22ge23le30
R2(config)#ipprefixlistTSTpermit10.4.4.0/22ge23le28
R2(config)#routerrip
R2(configrouter)#distributelistprefixTSTinf0/0
R2#Cleariproute*

Toverifytheconfiguration:

www.ccieuniversity.com

OnR2
R2#Showiprouterip
10.0.0.0/8isvariablysubnetted,7subnets,7masks
R10.4.2.8/29[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.1.4/30[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.3.16/28[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.4.32/27[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:10,FastEthernet0/0
R10.4.6.128/25[120/1]via10.1.12.1,00:00:10,FastEthernet0/0

Task27
Removethecommandsfromtheprevioustaskandensurethatallthenetworksarein
R2sroutingtable.

OnR2
R2(config)#NoipprefixlistTSTpermit10.4.0.0/22ge23le30
R2(config)#NoipprefixlistTSTpermit10.4.4.0/22ge23le28
R2(config)#routerrip
R2(configrouter)#NodistributelistprefixTSTinf0/0
R2#Cleariproute*

Toverifytheconfiguration:
OnR2
R2#Showiprouterip
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gateway oflastresortisnotset

www.ccieuniversity.com

10.0.0.0/8isvariablysubnetted,11subnets,7masks
R10.4.2.8/29[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
C10.1.12.0/24isdirectlyconnected,FastEthernet0/0
R10.4.1.4/30[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.1.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.0.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.3.0/24[120/1]via10.1.12.1,00:00:08,FastEthernet0/0
R10.7.2.0/24 [120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.3.16/28[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.4.32/27[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.5.64/26[120/1]via10.1.12.1,00:00:09,FastEthernet0/0
R10.4.6.128/25[120/1]via10.1.12.1,00:00:09,FastEthernet0/0

Task28
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab1
ConfiguringRIPv2

R1

R2
.1.2
S0/0

FrameRelay

S0/0
F0/0.2

.3
F0/0
.3

.4

FrameRelay

S0/0

R4

S0/0

R3

LabSetup
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
R1andR2shouldbeconfiguredinaframerelaypointtopoint.

R3andR4shouldbeconfiguredinaframerelaypointtopoint.

www.ccieuniversity.com

IPAddressing
Router
R1
R2

R3

R4

Interface
Lo0
S0/0
Lo0
S0/0
F0/0
Lo0
S0/0
F0/0
Lo0
S0/0

IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24

Task1
ConfigureRIPv2onallroutersandadvertisetheirdirectlyconnectednetworks.When
configuringRIP,ensurethatautosummarizationisdisabled.

OnR1
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#network131.1.0.0
R1(configrouter)#network1.0.0.0

OnR2
R2(config)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#network131.1.0.0
R2(configrouter)#network2.0.0.0

OnR3
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#network131.1.0.0

www.ccieuniversity.com

R3(configrouter)#network3.0.0.0

OnR4
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#network131.1.0.0
R4(configrouter)#network4.0.0.0

Task2
Configuretheserouterssuch thatupdateinterval,invalidationtimer,Holddowntimerand
flushtimersaredoublethedefaultvalue.
Tofindoutthedefaultparameters:

OnR1
Showipprotocols
RoutingProtocolis"rip"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnotset
Sendingupdatesevery30seconds,nextduein22seconds
Invalidafter180seconds,holddown180, flushedafter240
Redistributing:rip
Defaultversioncontrol:sendversion2,receiveversion2
InterfaceSendRecvTriggeredRIPKeychain
Serial0/0.12
22
Loopback0
22
Automaticnetworksummarizationisnotineffect
Maximumpath:4
RoutingforNetworks:
1.0.0.0
131.1.0.0
RoutingInformationSources:
GatewayDistanceLastUpdate
131.1.12.212000:00:19
Distance:(defaultis120)

OnR1
Routerrip

www.ccieuniversity.com

TimersBasic?
<04294967295> Intervalbetweenupdates
R1(configrouter)#timersbasic60?
<14294967295> Invalid
R1(configrouter)#timersbasic60360?
<04294967295> Holddown
R1(configrouter)#timersbasic60360360?
<14294967295> Flush
R1(configrouter)#timersbasic60360360480

OnAllRouters
(config)#Routerrip
(configrouter)#Timersbasic60360360480

Task3
Theseroutersshouldsuppressaflashupdateiftheregularupdateisduein10secondsor
less.

On AllRouter
(config)#routerrip
(configrouter)#flashupdatethreshold10
TheFlashupdatethresholdcommandsuppressesflashupdateswhenthearrivalof
aregularlyscheduledupdatematches,orislessthanthenumberofsecondsthatis
configured,inthiscase10seconds.Therangeis0 30seconds.
Theaboveconfigurationconfiguresallfourrouterstosuppressaregularly
scheduledflashupdate,iftheregularupdateisduein10secondsorless.

Toverifytheconfiguration:
Showipprotocols
RoutingProtocolis"rip"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnotset

www.ccieuniversity.com

Sendingupdatesevery60seconds,nextduein35seconds
Flashupdateissuppressedwhennextupdateduewithin10seconds
Invalidafter360seconds,holddown360,flushedafter480
(Therestoftheoutputisomitted)

Task4
R1isahighspeedroutersendingupdatestoR2whichisalowspeedrouter.Becauseof
this,factR2mightnotbeabletoreceiveandprocessupdatesattheratethatR1operates,
therefore,configureR1suchthatwhenithasmultipleRIPpacketstosendtoR2,itwill
wait10millisecondsbetweenthepackets.Tofurtherremedythesesituations,configure
R2toincreaseitsRIPqueuedepthto75.

On R1
(config)#routerrip
(configrouter)#outputdelay10
TheaboveconfigurationwillhelpR2fromlosingroutinginformationbecausethis
commandintroducesadelayof10millisecondsbetweenpacketsinamultiplepacket
RIPupdates.Bydefaultthereisnointerpacketdelayandtherangeforthisdelayis
(850milliseconds).

On R2
(configrouter)#inputqueue75
ThiscommandwillalsohelptopreventroutinginformationfrombeinglostThe
valuespecifiesthedepthoftheinput queue,thelargerthevalue,thelargerthe
depthofthequeue.Therangeis(0 1024)andthedefaultvalueis50.

Donoterasetheconfiguration,proceedtothenextlab.

www.ccieuniversity.com

Lab2
RIPv2Authentication
(Thislabbuildsonthepreviouslab)

Task1
ConfigurecleartextauthenticationbetweenR1andR2andMD5authenticationbetween
R3andR4.Useciscotobethepassword.

ToenableauthenticationforRIPversion2,akeymustbedefinedandthenappliedto
theinterface.
RIPandEIGRPusekeychainauthentication,inwhichakeychainisconfigured.
Withinthatkeychainakeyisdefinedandakeystring(Password)isassignedtothe
definedkey.Lastlythekeychainisassignedtotheinterfaceandtheauthentication
typeisconfigured.RIPcanbeconfiguredtoauthenticatewithcleartextorMD5

OnR1
R1(config)#keychainTEST
R1(configkeychain)#key1
R1(configkeychainkey)#keystringcisco
R1(config)#intS0/0.12
R1(configif)#ipripauthenticationkeychainTEST

OnR2
R2(config)#keychainTEST
R2(configkeychain)#key1
R2(configkeychainkey)#keystringcisco
R2(config)#intS0/0.21
R2(configif)#ipripauthenticationkeychainTEST

OnR3
R3(config)#keychainTEST
R3(configkeychain)#key1

www.ccieuniversity.com

R3(configkeychainkey)#keystringcisco
R3(config)#intS0/0.34
R3(configsubif)#ipripauthenticationkeychainTEST
R3(configsubif)#ipripauthenticationmodemd5

OnR4
R4(config)#keychainTEST
R4(configkeychain)#key1
R4(configkeychainkey)#keystringcisco
R4(configkeychainkey)#intS0/0.43
R4(configsubif)#ipripauthenticationkeychainTEST
R4(configsubif)#ipripauthenticationmodemd5

Toverifytheconfiguration:
OnR1
RoutingProtocolis"rip"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnotset
Sendingupdatesevery60seconds,nextduein35seconds
Flashupdateissuppressedwhennextupdateduewithin10seconds
Invalidafter360seconds,holddown360,flushedafter480
Redistributing:rip
Defaultversioncontrol:sendversion2,receiveversion2
InterfaceSendRecvTriggeredRIP Keychain
FastEthernet0/022
Notethekeychainin
Serial0/0.2122
TEST
UseisTEST
Loopback022

Task2
Removetheconfigurationcommandsfromthislabbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab3
ConfiguringRIPv2Updates
UsethetopologyandIPaddressingfromLab1

Task1
ConfigureRIPv2onR1,R2,R3,andR4andadvertisetheirdirectlyconnectednetworks,
ensurethatautosummarizationisdisabledonallrouters.

Task2
R1andR2shouldexchangetheirupdatesusingtheMulticastdestinationof224.0.0.9,
whereasR2andR3shouldexchangetheirupdatesviaUnicast.

RIPv2bydefaultsendsitsupdatestothedestinationaddressof224.0.0.9,this
behaviorcanbechangedsuchthattheupdatesaresenttotheneighborsIPaddress
(Unicast)ortothebroadcast(255.255.255.255)address,inthistaskweonlyneedto
beconcernedwithR2andR3sconfiguration,sinceR1andR2willsendtheir
updatesto224.0.0.9(Multicast)addressbydefault.

OnR2
R2(config)#routerrip
R2(configrouter)#passiveinterfaceF0/0
ThepassiveinterfacecommandstopsRIPfromsendingupdatesoutofaspecified
interface.ThisrouterwillstillprocesstheupdatesthatitreceivesthroughF0/0
interface.Anotherwaytohandlethistaskistoconfigurepassiveinterface
default.ThiscommandstopssendingRIPupdatesoutofallinterfaces,andthenwe
canconfigureneighborcommandtosendupdatesONLYtothespecified
neighbor.Iftheneighborcommandisusedwithoutthepassiveinterfacecommand,
RIPwillsendtwoupdates,onetoMulticastandanothertoaUnicastdestination.
R2(configrouter)#neighbor131.1.23.3

OnR3
R3(config)#routerrip
R3(configrouter)#passiveinterfaceF0/0
R3(configrouter)#neighbor131.1.23.2

www.ccieuniversity.com

Task 3
R3andR4shouldexchangeupdatesviaBroadcast.

OnR3
R3(config)#ints0/0.34
R3(configsubif)#ipripv2broadcast

OnR4
R4(config)#ints0/0.43
R4(configsubif)#ipripv2broadcast
TheIPripv2broadcastisusedtosendversion2updatestoadestinationaddress
of255.255.255.255forhosts/routersthatdonotlistentoMulticastaddresses.

Task 4
Removetheconfigurationcommandsformthislabbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab4
ConfiguringDefaultroutes
UsethetopologyandIPaddressingfrom Lab1

Task1
R1shouldNOTbeconfiguredwithanyroutingprotocol.Configureastaticroutefor
network1.0.0.0/8onR2withanexthopIPaddressof131.1.12.1,andconfigureastatic
defaultrouteonR1pointingtoR2sS0/0.21IPaddress(131.1.12.2).

OnR1
R1(config)#iproute0.0.0.00.0.0.0131.1.12.2

OnR2
R2(config)#iproute1.0.0.0255.0.0.0131.1.12.1

Task2
ConfigureRIPv2onR2,R3andR4andadvertisetheirconnectednetworks.Ensurethat
autosummarizationisdisabled.

OnR2
R2(config)#routerrip
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0
R2(configrouter)#ver2
R2(configrouter)#noau

OnR3
R3(config)#routerrip
R3(configrouter)#netw131.1.0.0
R3(configrouter)#netw3.0.0.0

www.ccieuniversity.com

R3(configrouter)#ver2
R3(configrouter)#noau

OnR4
R2(config)#routerrip
R4(configrouter)#netw131.1.0.0
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw4.0.0.0

Task3
ConfigureR2toinjectadefaultrouteintoRIProutingdomain.Thisconfigurationshould
betestedinthreedifferentways.

Defaultrouteinjectioncanbeconfiguredinthreewaysasfollows:
Defaultinformationoriginate
ConfiguringaStaticdefaultroute,andthenredistributingthestaticroute
intoRIProutingdomain.
IPdefaultnetworkcommand.

Firstmethod:
OnR2
R2(config)#routerrip
R2(configrouter)#defaultinformationoriginate

Toverifytheconfiguration:
Ping1.1.1.1
Youshouldbesuccessful

www.ccieuniversity.com

Thesecondmethod:
RemovethepreviouscommandfromR2.

OnR2
R2(configrouter)#nodefaultinformationoriginate
Removethestaticroutefornetwork1.0.0.0fromR2.
R2(config)#noiproute1.0.0.0255.0.0.0131.1.12.1
Configureastaticdefaultroutepointingto131.1.12.1andthenredistributestatic
routesintoRIProutingdomain.
R2(config)#iproute0.0.0.00.0.0.0131.1.12.1
R2(config)#routerrip
R2(configrouter)#redistributestatic
Note,thismethodcanalsobeconfiguredusingthefollowingsteps:
DonotremovethestaticroutefromR2fornetwork1.0.0.0/8.
CreateastaticdefaultroutepointingtoNULL0
RedistributestaticintoRIP.

Thethirdmethod:
RemovethestaticdefaultroutethatwasconfiguredinthepreviousstepfromR2:
R2(config)#Noiproute0.0.0.00.0.0.0131.1.12.1
RemovetheredistributestaticthatwasconfiguredinthepreviousstepfromR2:
R2(config)#routerrip
R2(configrouter)#Noredistributestatic
ConfigureipdefaultnetworkcommandtoinjectadefaultrouteintoRIPsrouting
domain.

OnR2
R2(config)#ipdefaultnetwork 2.0.0.0

www.ccieuniversity.com

TheabovecommandinjectsadefaultrouteintoRIPsroutingdomain.Thistellsthe
otherroutersthatiftheyarenotawareofanyroutes,theyshouldsendittoR2.

Toverifytheconfiguration:
OnR4
Ping1.1.1.1
Note,youshouldbegettingunreachablemessagesandyourpingshouldnotbe
successful.TheactualechomessagesaregettingtoR2,butR2doesnothavearoute
tonetwork1.0.0.0/8,therefore,torectifythisproblemwehavetoconfigureastatic
routeonR2thatispointingto131.1.12.1asfollows:

OnR2
Iproute1.0.0.0255.0.0.0131.1.12.1

Task4
Removethecommand/sfromTask1andTask3beforeproceedingtothenexttask.

OnR2
R2(config)#NoIproute1.0.0.0255.0.0.0131.1.12.1
R2(config)#Noipdefaultnetwork2.0.0.0

OnR1
R1(config)#Noiproute0.0.0.00.0.0.0131.1.12.2

Task5
ConfigureEIGRPAS100onR1andR2andadvertisethefollowingnetworksinthis
routingdomain:
OnR1Advertiseitsdirectlyconnectednetworksandremovethestaticdefault
routethatpointsto131.1.12.2.

www.ccieuniversity.com
OnR2Advertisenetwork131.1.12.0/24.

OnR1
Routereigrp100
Noau
Netw1.0.0.0
Netw131.1.12.00.0.0.255
Exit
Noiproute0.0.0.00.0.0.0131.1.12.2

OnR2
Routereigrp100
Noau
Netw131.1.12.00.0.0.255

Task6
DonotredistributebetweentheroutingprotocolsandinsteadconfigureR2toinjecta
defaultrouteintoRIPsroutingdomain.Chooseanymethodtoaccomplishthistask.R3
andR4mustusethedefaultroutetoreachnetwork1.0.0.0/8.

OnR2
Routerrip
Defaultinformationoriginate

Task7
SincetheusersthatareconnectedtoR3andR4willONLYusethedefaultroutefromthe
previoussteptoreachnetwork1.0.0.0/8,configureR2suchthatitinjectsthedefault
routeonlyifnetwork1.0.0.0isinR2sroutingtable.

OnR2
R2(config)#accesslist1permit1.0.0.00.255.255.255
R2(config)#routemapTESTpermit10

www.ccieuniversity.com

R2(configroutemap)#matchipaddr1
R2(config)#routerrip
R2(configrouter)#defaultinformationoriginateroutemapTEST
Thisconfigurationiscalledconditionaldefaultrouteinjection.Applyinga
condition,inthiscasearoutemap,candeterminewhentheroutemapisoriginated.
Theroutemapcanalsobeconfiguredtomatchanaccesslist,then,setinterface
F0/0,tobemorespecificastowhereandwhatinterfacethedefaultroutewillbe
originated.

Task8
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab5
Filteringroutes
UsethetopologyfromLab1

LabSetup:
ConfigurethefollowingIPaddressingontherouters:
Router
R1
R2
R3

R4

Interface
Lo0
S0/0.12
S0/0.21
F0/0
Lo0
S0/0.34
F0/0
Lo0
S0/0.43

IPaddress
1.1.1.1/8
131.1.12.1/24
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24

ConfigurethefollowingLoopbackinterfacesonR2:
Lo02.2.0.2/24
Lo12.2.1.2/24
Lo22.2.2.2/24
Lo32.2.3.2/24
Lo42.2.4.2/24

Lo52.2.5.2/24
Lo62.2.6.2/24
Lo7 2.2.7.2/24
Lo82.2.8.2/24
Lo92.2.9.2/24

Task1
ConfigureRIPv2routingprotocolonalltheroutersandadvertisetheirdirectlyconnected
interfaces.Ensurethatautosummarizationisdisabledonallrouters.

OnR1
R1(config)#routerrip
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw131.1.0.0
R1(configrouter)#noau

www.ccieuniversity.com

R1(configrouter)#ver2

OnR2
R2(config)#routerrip
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0
R2(configrouter)#noau
R2(configrouter)#ver2

OnR3
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0
R3(configrouter)#netw3.0.0.0

OnR4
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0
R4(configrouter)#netw4.0.0.0

Task2
EnsurethatR1onlyreceivestheevennumberedsubnets(2.2.0.0,2.2.2.0,2.2.4.0,2.2.6.0,
2.2.8.0)ofmajornetwork2.0.0.0fromR2.Useminimumnumberofcommandlinesto
accomplishthistask

OnR1
Beforeweconfigurethetask,weshouldchecktheroutingtableonthisrouter:
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2

www.ccieuniversity.com

i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2


iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
2.0.0.0/24issubnetted,10subnets
R2.2.0.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.1.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.2.0[120/1] via131.1.12.2,00:00:11,Serial0/0.12
R2.2.3.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.4.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.5.0[120/1]via131.1.12.2,00:00:11,Serial0/0.12
R2.2.6.0[120/1]via131.1.12.2,00:00:12,Serial0/0.12
R2.2.7.0[120/1]via131.1.12.2,00:00:12,Serial0/0.12
R2.2.8.0[120/1]via131.1.12.2,00:00:12,Serial0/0.12
R2.2.9.0[120/1]via131.1.12.2,00:00:12,Serial0/0.12
R3.0.0.0/8[120/2]via131.1.12.2,00:00:12,Serial0/0.12
R4.0.0.0/8[120/3]via131.1.12.2,00:00:14,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
R131.1.23.0[120/1]via131.1.12.2,00:00:14,Serial0/0.12
R
131.1.34.0[120/2]via131.1.12.2,00:00:14,Serial0/0.12
Tofiltersuchthatonlytheevennumberedsubnetsofnetwork2.0.0.0areinthe
routingtable:

OnR1
R1(config)#accesslist1deny2.2.1.00.0.254.255
R1(config)#accesslist1permitany
R1(config)#routerrip
R1(configrouter)#distributelist1inS0/0.12
Explanationoftheaccesslist:
Example:
Accesslist1permit2.0.0.00.255.255.255
Inthisaccesslistwearepermittinganynetworkthatmatchestheresultofthe
andingofnetwork 2.0.0.0withaninversemaskof0.255.255.255.Inorderforusto
dotheandingwemustgettheregularmask,togettheregularmask,weshould
subtract0.255.255.255from255.255.255.255,whichresultsto255.0.0.0
Therefore,theandingisasfollows:

www.ccieuniversity.com

00000010.00000000.00000000.00000000Network(Inthiscase2.0.0.0)
11111111.11111111.11111111.00000000RegularMask(Inthiscase255.255.255.0)
Theresultofthisandingis2.0.0.0,thereforeiftheresultoftheANDmatches
network2.0.0.0,itispermitted,ifNOT,itsdenied.
Inthistasktheaccesslistis:
Accesslist1deny2.2.1.00.0.254.255
Therefore,inorderforustodotheanding,wehavetogettheregularmaskforthe
inversemaskof0.0.254.255,whichis255.255.255.255minus0.0.254.255equalsto
255.255.1.0
00000010.00000010.00000000.00000000(Network)
11111111.11111111.00000001.00000000(Regularmask)
TheresultofthisANDis2.2.0.0,therefore,ifitmatches2.2.0.0,itshouldbedenied,
ifthenetworkisreplacedwithothersubnetsofnetwork2.2.0.0,wewillseethatthe
ODDnumberednetworksarealldenied.
LastlyiftheaccesslistwaswrittentopermittheevennumberednetworksONLY,
theothernetworks(131.1.34.0/24,131.1.23.0/24,4.0.0.0/8,3.0.0.0.0/8)wouldnt
havebeenadvertised.

Toverifytheconfiguration:
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
2.0.0.0/24issubnetted,5subnets
R2.2.0.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R2.2.2.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R2.2.4.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R2.2.6.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12

www.ccieuniversity.com

R2.2.8.0[120/1]via131.1.12.2,00:00:08,Serial0/0.12
R3.0.0.0/8[120/2]via131.1.12.2,00:00:08,Serial0/0.12
R4.0.0.0/8[120/3]via131.1.12.2,00:00:09,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
R131.1.23.0[120/1]via131.1.12.2,00:00:09,Serial0/0.12
R131.1.34.0[120/2]via131.1.12.2,00:00:09,Serial0/0.12

Task3
ConfigureR3suchthatitonlyreceivestheoddroutes.Useminimumnumberof
commandlinestoaccomplishthistask

OnR3
R3(config)#accesslist1deny2.2.0.00.0.254.255
R3(config)#accesslist1permitany
R3(config)#routerrip
R3(configrouter)#distributelist1inF0/0

ToVerifytheconfiguration:
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R1.0.0.0/8[120/2]via131.1.23.2,00:00:01,FastEthernet0/0
2.0.0.0/24issubnetted,5subnets
R2.2.1.0[120/1] via131.1.23.2,00:00:01,FastEthernet0/0
R2.2.3.0[120/1]via131.1.23.2,00:00:01,FastEthernet0/0
R2.2.5.0[120/1]via131.1.23.2,00:00:01,FastEthernet0/0
R2.2.7.0[120/1]via131.1.23.2,00:00:01,FastEthernet0/0
R2.2.9.0 [120/1]via131.1.23.2,00:00:01,FastEthernet0/0
C3.0.0.0/8isdirectlyconnected,Loopback0
R4.0.0.0/8[120/1]via131.1.34.4,00:00:02,Serial0/0.34

www.ccieuniversity.com

131.1.0.0/24issubnetted,3subnets
R131.1.12.0[120/1]via131.1.23.2,00:00:02,FastEthernet0/0
C131.1.23.0isdirectlyconnected,FastEthernet0/0
C131.1.34.0isdirectlyconnected,Serial0/0.34

Task4
R2shouldbeconfiguredsuchthatR4filtersnetwork1.0.0.0/8

OnR2
R2(config)#accesslist1permit1.0.0.00.255.255.255
R2(config)#routerrip
R2(configrouter)#offsetlist1out13f0/0

ToVerifytheconfiguration
OnR4
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
2.0.0.0/24issubnetted,5subnets
R2.2.1.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.3.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.5.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.7.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R2.2.9.0[120/2]via131.1.34.3,00:00:11,Serial0/0.43
R3.0.0.0/8[120/1]via131.1.34.3,00:00:11,Serial0/0.43
C4.0.0.0/8isdirectlyconnected,Loopback0
131.1.0.0/24issubnetted,3subnets
R131.1.12.0[120/2]via131.1.34.3,00:00:12,Serial0/0.43
R131.1.23.0[120/1]via131.1.34.3,00:00:12,Serial0/0.43
C
131.1.34.0isdirectlyconnected,Serial0/0.43

www.ccieuniversity.com

Thingstorememberaboutoffsetlists:
1.
2.
3.
4.

ItonlyworkswithRIPandEigrproutingprotocols.
InRIP,itsusedtoaddtotheexistinghopcount.
InEigrpitsusedtoaddtotheexistingdelayvalue.
Ifanaccesslistisused,theoffsetlistwilloffsetthehopcountorthedelay
valueforthenetworksthatarepermittedintheaccesslist.
5. Ifallnetworksaretobeaffected,thenoffsetlist0shouldbeused.

Task5
Erasetheconfigurationfromthislabbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab6
AdvancedRIPv2configuration

R1

F0/0
F0/0

R2
S0/0

FrameRelay

S0/0

S0/0

R4
R3

F0/0
F0/0

R5

www.ccieuniversity.com

LabSetup:
Configuretheroutersbasedonthetopologyandipaddressingchart
R1andR2sF0/0interfaceshouldbeconfiguredinVLAN12.
R4andR5sF0/0interfaceshouldbeconfiguredinVLAN45
ConfiguretheFrameRelaycloudusingthefollowingpolicy:
a) RoutersR2,R3andR4shouldbeconfiguredinahubandspokemanner.R2
shouldbeconfiguredtobethehubwhereasR3andR4shouldbeconfigured
asspokes.
b) R2andR3shouldbeconfiguredinapointtopointmanner,whereasthe
connectionbetweenR2andR4shouldbeconfiguredinamultipointmanner.
c) R4shouldNOTbeconfiguredwithasubinterface.

IPaddressing:
Router
R1

R2

R3
R4

R5

Interface
Lo0
Lo1
Lo2
Lo3
Lo4
Lo5
F0/0
Lo0
F0/0
FramerelayconnectiontoR3
FramerelayconnectiontoR4
Lo0
FramerelayconnectiontoR2
Lo0
FramerelayconnectiontoR2
F0/0
Lo0
F0/0

IPAddress
10.1.1.1/24
10.1.2.1/24
100.0.0.1/24
111.1.1.33/27
211.1.1.65/26
111.1.1.17/28
200.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
131.1.24.2/24
3.3.3.3/8
131.1.23.3/24
4.4.4.4/8
131.1.24.4/24
131.1.45.4/24
5.5.5.5/8
131.1.45.5/24

www.ccieuniversity.com

Task1
ConfigureRIPv2betweenR1andR2andadvertisetheirdirectlyconnectednetworks.If
thisconfigurationissuccessful,R2shouldreceivetheLoopbacknetworkaddresses
advertisedbyR1.

OnR1
R1(config)#routerrip
R1(configrouter)#netw200.1.12.0
R1(configrouter)#netw10.0.0.0
R1(configrouter)#netw100.0.0.0
R1(configrouter)#netw111.0.0.0
R1(configrouter)#netw211.1.1.0
R1(configrouter)#ver2
R1(configrouter)#noau
R1(configrouter)#novalidateupdatesource

OnR2
R2(config)#routerrip
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw131.1.0.0
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#novalidateupdatesource
RIPandIGRParetheONLYtworoutingprotocolsthatvalidatethesourceIP
addressofincomingupdates.
BeforeRIPand/orIGRProutingprotocolsacceptroutesfromagivenneighbor,
theywanttomakesurethatthesourceIPaddressoftheadvertisingrouterisfrom
thesameIPaddressspaceasthelinkthatthetworoutersareconnectedto.
IftheroutersthathavetoexchangeroutinginformationarefromdifferentIP
addressspaces,thenthesourcevalidationshouldbenegatedusingnovalidate
updatesource

ToVerifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2

www.ccieuniversity.com

E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C2.0.0.0/8isdirectlyconnected,Loopback0
100.0.0.0/24issubnetted,1subnets
R100.0.0.0[120/1]via200.1.12.1,00:00:00
111.0.0.0/8isvariablysubnetted,2subnets,2masks
R111.1.1.32/27[120/1]via200.1.12.1,00:00:00
R111.1.1.16/28[120/1]via200.1.12.1,00:00:00
10.0.0.0/24issubnetted,2subnets
R10.1.2.0[120/1]via200.1.12.1,00:00:00
R10.1.1.0 [120/1]via200.1.12.1,00:00:00
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24
211.1.1.0/26issubnetted,1subnets
R211.1.1.64[120/1]via200.1.12.1,00:00:02
Note,eventhoughthenetworksareintheroutingtableofR2,theyareNOT
reachable,becauseR2doesNOThaveNLRI(NetworkLayerReachability
Information)tothenexthopIPaddress(200.1.12.1)thatisadvertised.

Task2
R2shouldonlyreceiveprefixeswithaprefixlengthof8to24andtheseprefixesshould
ONLYbereceivedfromR1andnootherrouter.DoNOTuseaneighborcommand,NAT
oranaccesslisttoaccomplishthistask.

OnR2
R2(config)#ipprefixlistTESTseq5permit0.0.0.0/0ge8le24
TheIPPrefixListcommandthatisnamedTESTstatesthatstartingwith0.0.0.0/0
(Anynetworkaddress)withaprefixlengthofGreaterthanorEqualto8,andLess
thanorequalto24.

www.ccieuniversity.com

R2(config)#ipprefixlistALLOWseq5permit200.1.12.1/32
ThisIPPrefixListcommandthatsnamedALLOW,permits200.1.12.1/32IP
address.
R2(config)#routerrip
R2(configrouter)#distributelistprefixTESTgatewayALLOWinF0/0
Thegatewaykeywordidentifiestherouterthatyouwillbeacceptingroutesfrom.
ThisrouterisidentifiedinaPrefixListcalledALLOW.Theroutesthatyouare
acceptingisidentifiedinthePrefixListcalledTEST.

ToVerifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternal type1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayof lastresortisnotset
C2.0.0.0/8isdirectlyconnected,Loopback0
100.0.0.0/24 issubnetted,1subnets
R
100.0.0.0 [120/1]via200.1.12.1,00:00:18
10.0.0.0/24 issubnetted,2subnets
R
10.1.2.0 [120/1]via200.1.12.1,00:00:18
R
10.1.1.0 [120/1]via200.1.12.1,00:00:18
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24

www.ccieuniversity.com

Task 3
EnsurethatR2canpingR1andallthenetworksadvertisedbyR1.DoNOTusea
secondaryIPaddressorNATtoaccomplishthistask.Youareallowedonestaticroute
perroutertoaccomplishthistask.

InorderforR2topingthesenetworks,thenexthopIPaddressofallthenetworks
advertisedbyR1shouldbereachable,thiscanbeaccomplishedasfollows:

OnR2
R2(config)#iproute200.1.12.1255.255.255.255f0/0

OnR1
R1(config)#iproute131.1.12.2255.255.255.255f0/0

Task 4
ConfigureRIPv2betweenR2andR3R3shouldadvertiseitsdirectlyconnectednetwork
intotheRIPv2routingdomain.
R2shouldbeconfiguredsothatitonlysendsitsupdateswhenthereisatopologychange.
IftherearenotopologychangesR2shouldsuppressitsregularperiodicupdates.

ToaccomplishthistaskweneedtoenabletriggeredextensionstoRIP.Thisfeature
willsuppressregularupdatesunlessthereisatopologychange.Toverifythis
configurationwecanusedebugipripcommand.

On R2
R2(config)#intS0/0.23
R2(configsubif)#ipriptriggered

OnR3
R3(config)#intS0/0.32
R3(configsubif)#ipriptriggered
R3(configsubif)#routerrip
R2(configrouter)#netw3.0.0.0
R2(configrouter)#netw131.1.0.0
R2(configrouter)#noau

www.ccieuniversity.com

R2(configrouter)#ver2

Toverifytheconfigurationandensurethattheseroutersare
exchangingroutes:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C2.0.0.0/8isdirectlyconnected,Loopback0
100.0.0.0/24issubnetted,1subnets
R100.0.0.0[120/1]via200.1.12.1,00:00:12
R3.0.0.0/8[120/1]via131.1.23.3,00:01:20,Serial0/0.23
200.1.12.0/32issubnetted,1subnets
S200.1.12.1isdirectlyconnected,FastEthernet0/0
10.0.0.0/24issubnetted,2subnets
R10.1.2.0[120/1]via200.1.12.1,00:00:12
R10.1.1.0[120/1]via200.1.12.1,00:00:12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24
R2#

Task 5
ConfigurethefollowingloopbackinterfacesonR4andadvertiseitsdirectlyconnected
networksinRIPv2.Thisroutershoulddisableautosummary.
Lo4040.1.0.4/24,Lo41 40.1.1.4/24,Lo42 40.1.2.4,Lo43 40.1.3.4/24

OnR4
R4(config)#intlo40

www.ccieuniversity.com

R4(configif)#ipaddr40.1.0.4255.255.255.0
R4(configif)#intlo41
R4(configif)#ipaddr40.1.1.4255.255.255.0
R4(configif)#intlo42
R4(configif)#ipaddr40.1.2.4255.255.255.0
R4(configif)#intlo43
R4(configif)#ipaddr40.1.3.4255.255.255.0
R4(config)#routerrip
R4(configrouter)#netw40.0.0.0
R4(configrouter)#netw4.0.0.0
R4(configrouter)#netw131.1.0.0
R4(configrouter)#noau
R4(configrouter)#ver2

Toverifytheconfiguration:
OnR4
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R2.0.0.0/8[120/1]via131.1.24.2,00:00:19,Serial0/0
100.0.0.0/24issubnetted,1subnets
R100.0.0.0[120/2]via131.1.24.2,00:00:19,Serial0/0
R3.0.0.0/8[120/2]via131.1.24.2,00:00:19,Serial0/0
C4.0.0.0/8isdirectlyconnected,Loopback0
40.0.0.0/24issubnetted,4subnets
C40.1.1.0isdirectlyconnected,Loopback41
C40.1.0.0isdirectlyconnected,Loopback40
C40.1.3.0isdirectlyconnected,Loopback43
C40.1.2.0isdirectlyconnected,Loopback42

www.ccieuniversity.com

10.0.0.0/24issubnetted,2subnets
R10.1.2.0[120/2]via131.1.24.2,00:00:21,Serial0/0
R10.1.1.0[120/2]via131.1.24.2,00:00:21,Serial0/0
131.1.0.0/24issubnetted,4subnets
R131.1.12.0[120/1]via131.1.24.2,00:00:21,Serial0/0
R
131.1.23.0[120/1]via131.1.24.2,00:00:21,Serial0/0
C131.1.24.0isdirectlyconnected,Serial0/0
C131.1.45.0isdirectlyconnected,FastEthernet0/0
R4#

Task 6
ConfigureRIPv2betweenR4andR5.R5shouldadvertiseitsdirectlyconnected
networks.EnsurethatR5getsasummaryroutefromR4fortheLoopbackinterfacesthat
werecreatedintheprevioustask(Task5).R4shouldNOTenableautosummary.

OnR5
R5(config)#routerrip
R5(configrouter)#ver2
R5(configrouter)#noau
R5(configrouter)#netw131.1.0.0
R5(configrouter)#netw5.0.0.0

Toverifytheconfiguration:
Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R2.0.0.0/8[120/2]via131.1.45.4,00:00:25,FastEthernet0/0
100.0.0.0/24issubnetted,1subnets
R100.0.0.0[120/3]via131.1.45.4,00:00:25,FastEthernet0/0
R3.0.0.0/8[120/3]via131.1.45.4,00:00:25,FastEthernet0/0
R4.0.0.0/8[120/1]via131.1.45.4,00:00:25,FastEthernet0/0
C5.0.0.0/8isdirectlyconnected,Loopback0

www.ccieuniversity.com

40.0.0.0/24issubnetted,4subnets
R40.1.1.0 [120/1]via131.1.45.4,00:00:25,FastEthernet0/0
R40.1.0.0[120/1]via131.1.45.4,00:00:00,FastEthernet0/0
R40.1.3.0[120/1]via131.1.45.4,00:00:00,FastEthernet0/0
R40.1.2.0[120/1]via131.1.45.4,00:00:00,FastEthernet0/0
10.0.0.0/24issubnetted,2subnets
R10.1.2.0[120/3]via131.1.45.4,00:00:00,FastEthernet0/0
R10.1.1.0[120/3]via131.1.45.4,00:00:00,FastEthernet0/0
131.1.0.0/24issubnetted,4subnets
R131.1.12.0[120/2]via131.1.45.4,00:00:00,FastEthernet0/0
R131.1.23.0[120/2]via131.1.45.4,00:00:00,FastEthernet0/0
R131.1.24.0[120/1]via131.1.45.4,00:00:00,FastEthernet0/0
C131.1.45.0isdirectlyconnected,FastEthernet0/0
Tosummarizeallthe40.1.0.0subnets:

OnR4
R4(config)#intf0/0
R4(configif)#ipsummaryaddressrip40.1.0.0255.255.252.0

ToVerifytheconfiguration:
OnR5
R5#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
R2.0.0.0/8[120/2]via131.1.45.4,00:00:02,FastEthernet0/0
100.0.0.0/24issubnetted,1subnets
R
100.0.0.0[120/3]via131.1.45.4,00:00:02,FastEthernet0/0
R3.0.0.0/8[120/3]via131.1.45.4,00:00:02,FastEthernet0/0
R4.0.0.0/8[120/1]via131.1.45.4,00:00:02,FastEthernet0/0
C5.0.0.0/8isdirectlyconnected,Loopback0
40.0.0.0/22issubnetted,1subnets
R40.1.0.0[120/1]via131.1.45.4,00:00:02,FastEthernet0/0
10.0.0.0/24issubnetted,2subnets

www.ccieuniversity.com

R10.1.2.0[120/3]via131.1.45.4,00:00:03,FastEthernet0/0
R10.1.1.0[120/3]via131.1.45.4,00:00:03,FastEthernet0/0
131.1.0.0/24issubnetted,4subnets
R131.1.12.0[120/2]via131.1.45.4,00:00:03,FastEthernet0/0
R131.1.23.0[120/2]via131.1.45.4,00:00:05,FastEthernet0/0
R131.1.24.0[120/1]via131.1.45.4,00:00:05,FastEthernet0/0
C131.1.45.0isdirectlyconnected,FastEthernet0/0

Task 7
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextsection.

www.ccieuniversity.com
Lab1
ConfiguringEIGRPandadjustingtimers

R1

R2
.1.2
S0/0

FrameRelay

S0/0
F0/0 .2

.3
F0/0
.3

R4
.4

. R3

FrameRelay

S0/0

S0/0

LabSetup:
R2andR3sF0/0interfaceshouldbeconfiguredtobeinVLAN23.

R1andR2,R3andR4shouldbeconfiguredinaframerelaymultipointmanner.
Donotuseasubinterfacetoaccomplishthistask.

www.ccieuniversity.com

IPAddressing
Router
R1
R2

R3

R4

Interface
Lo0
F/RinterfacetoR2
Lo0
F/RinterfacetoR1
F0/0interfacetoR3
Lo0
F/RinterfacetoR4
F0/0interfacetoR2
Lo0
F/RinterfacetoR3

IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24

Task1
ConfigureEIGRPAS100onallroutersandadvertisetheirdirectly connectednetworks.

OnR1
R1(config)#routereigrp100
R1(configrouter)#noau
R1(configrouter)#netw131.1.12.00.0.0.255
R1(configrouter)#netw1.1.1.1255.255.255.255

OnR2
R2(config)#routereigrp100
R2(configrouter)#noau
R2(configrouter)#netw131.1.12.00.0.0.255
R2(configrouter)#netw2.0.0.00.255.255.255
R2(configrouter)#netw131.1.23.00.0.0.255

OnR3
R3(configif)#routereigrp100
R3(configrouter)#noau
R3(configrouter)#netw131.1.23.00.0.0.255
R3(configrouter)#netw131.1.34.00.0.0.255
R3(configrouter)#netw3.3.3.3255.255.255.255

OnR4

www.ccieuniversity.com

R4(config)#routereigrp100
R4(configrouter)#noau
R4(configrouter)#netw131.1.34.00.0.0.255
R4(configrouter)#netw4.0.0.0

Task2
Theseroutersshouldsendtheirhellosevery30secondsandiftheydontreceiveahello
fromtheirneighboringrouterfor120seconds,theneighboradjacencyshouldbe
terminated.

On R1
IntS0/0.12
R1(configsubif)#iphellointervaleigrp10030
R1(configsubif)#ipholdtimeeigrp100120

OnR2
IntS0/0.21
R2(configsubif)#iphellointervaleigrp10030
R2(configsubif)#ipholdtimeeigrp100120
IntF0/0
R2(configsubif)#iphellointervaleigrp10030
R2(configsubif)#ipholdtimeeigrp100120

OnR3
IntS0/0.34
R3(configsubif)#iphellointervaleigrp10030
R3(configsubif)#ipholdtimeeigrp100120
IntF0/0
R3(configsubif)#iphellointervaleigrp10030
R3(configsubif)#ipholdtimeeigrp100120

OnR4
IntS0/0.43
R4(configsubif)#iphellointervaleigrp10030
R4(configsubif)#ipholdtimeeigrp100120

www.ccieuniversity.com

Task3
EnsurethattheseroutersusebandwidthonlyandNOTbandwidth+delaytocalculate
theircompositemetricforagivennetwork.

ThistaskisaccomplishedbysettingtheKvalues,thecommandtoconfiguredtheK
valuesis:
Metricweighttosk1k2k3k4k5
ThiscommandisenteredinrouterEigrpconfigmode,wheretosvalueisalwaysset
to0,andthe defaultKvaluesareasfollows:
K1=1,K2=0,K3=1,K4=0,K50
TheKvalueseffecttheresultofthefollowingformula:
[(K1*Bandwidth)+(K2*bandwidth/256 load)+(K3*delay)]*256
IfK5doesnotequaltozero,thenanadditionaloperationisperformedasfollows:
[K5/K4+reliability]
Therefore,ifonlythebandwidthiswhatshouldbeconsidered,thenwemustsetthe
valueofK3tozero.Butrememberthatthischangemustoccuronallroutersorelse
therouterswontestablishneighboradjacency.
TodisplaythedefaultvaluesfortheKvariables,enterthefollowingcommand:
Showipprotocols
RoutingProtocolis"eigrp100"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnotset
Defaultnetworksflaggedinoutgoingupdates
Defaultnetworksacceptedfromincomingupdates
EIGRPmetricweightK1=1,K2=0,K3=1,K4=0,K5=0
EIGRPmaximumhopcount100
EIGRPmaximummetricvariance1
Redistributing:eigrp100
EIGRPNSFawarerouteholdtimeris240s
Automaticnetworksummarizationisnotineffect
ThedefaultvaluesfortheK
Maximumpath:4
Variables
RoutingforNetworks:
4.0.0.0
131.1.34.0/24
RoutingInformationSources:
GatewayDistanceLastUpdate
131.1.34.39000:14:15
Distance:internal90external170

On AllRouters

www.ccieuniversity.com

(configrouter)#metricweights010000

ToVerifytheconfiguration:
Showipprotocols
RoutingProtocolis"eigrp100"
Outgoingupdatefilterlistforallinterfacesisnotset
Incomingupdatefilterlistforallinterfacesisnot set
Defaultnetworksflaggedinoutgoingupdates
Defaultnetworksacceptedfromincomingupdates
EIGRPmetricweightK1=1,K2=0,K3=0,K4=0,K5=0
EIGRPmaximumhopcount100
EIGRPmaximummetricvariance1
Redistributing:eigrp100
EIGRPNSFawarerouteholdtimeris240s
Automaticnetworksummarizationisnotineffect
Maximumpath:4
RoutingforNetworks:
4.0.0.0
131.1.34.0/24
RoutingInformationSources:
GatewayDistanceLastUpdate
131.1.34.3
9000:00:05
Distance:internal90external170

Task4
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab2
EIGRPMetric
UsethetopologyandIPaddressingfromLab1

Task1
RunRIPv2onR1andadvertiseitsdirectly connectednetworks.

OnR1
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#netw131.1.0.0
R1(configrouter)#netw1.0.0.0
R1(configrouter)#ver2

Task2
R2shouldadvertiseitsframerelayandLoopback0interfaceinRIPv2andLoopback1
(22.2.2.2/8)andF0/0interfaceinEIGRP100.

OnR2
R2(configsubif)#routerrip
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0
R2(configrouter)#ver2
R2(configrouter)#noau
R2(configrouter)#passiveinterfaceF0/0
R2(configrouter)#routereigrp100
R2(configrouter)#netw22.0.0.0
R2(configrouter)#netw131.1.23.00.0.0.255

www.ccieuniversity.com

Task3
R3andR4shouldrunEIGRP100andadvertisetheirdirectlyconnectednetworksinthe
EIGRProutingdomain.

OnR3
R3(config)#routereigrp100
R3(configrouter)#noau
R3(configrouter)#netw131.1.23.00.0.0.255
R3(configrouter)#netw131.1.34.00.0.0.255
R3(configrouter)#netw3.0.0.0

OnR4
R4(configrouter)#routereigrp100
R4(configrouter)#netw4.0.0.0
R4(configrouter)#netw131.1.34.00.0.0.255
R4(configrouter)#noau

Task4
PerformamutualredistributionbetweenRIPv2andEIGRPsuchthatR1seestheEIGRP
routeswiththecorrecthopcount.Forexample,R1shouldseenetwork3.0.0.0twohops
away,andnetwork4.0.0.0threehopsaway.

On R2
R2(config)#accesslist3permit3.0.0.00.255.255.255
R2(config)#accesslist4permit4.0.0.00.255.255.255
R2(config)#accesslist34permit131.1.34.00.0.0.255
R2(config)#accesslist23permit131.1.23.00.0.0.255
R2(config)#accesslist22permit22.0.0.00.255.255.255
R2(config)#routemapTESTpermit10
R2(configroutemap)#matchipaddr3
R2(configroutemap)#setmetric2
R2(config)#routemapTESTpermit20
R2(configroutemap)#matchipaddr4
R2(configroutemap)#setmetric3

www.ccieuniversity.com

R2(config)#routemapTESTpermit30
R2(configroutemap)#matchipaddr23
R2(configroutemap)#setmetric1
R2(config)#routemapTESTpermit40
R2(configroutemap)#matchipaddr34
R2(configroutemap)#setmetric2
R2(config)#routemapTESTpermit50
R2(configroutemap)#matchipaddr22
R2(configroutemap)#setmetric1
R2(config)#routemapTESTpermit50
R2(configroutemap)#setmetric1
Note,routemapTESTpermit50mustbeconfiguredforthefuturenetworksthat
mayberedistributedintoRIP.
R2(configrouter)#routerrip
R2(configrouter)#redistributeeigrp100routemapTEST
R2(config)#routereigrp100
R2(configrouter)#redistributeripmetric15002000025511500

Task5
Erasestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab3
EIGRPSummarization&Advanced
Summarization

R1

R2
.1.2
F0/0
S0/0 .2

F0/0

FrameRelay

.3

R4

S0/0
.3

.4
F0/0

. R3

F0/0

IPAddressing
Router
R1

R2

Interface
Lo0
Lo1
Lo2
Lo3
F0/0interfacetoR2
Lo0
Lo1
Lo2
Lo3
F0/0interfacetoR1
S0/0interfacetoR3

IPaddress
1.1.0.1/24
1.1.1.1/24
1.1.2.1/24
1.1.3.1/24
131.1.12.1/24
2.2.4.2/24
2.2.5.2/24
2.2.6.2/24
2.2.7.2/24
131.1.12.2/24
131.1.23.2/24

www.ccieuniversity.com

R3

Lo0
Lo1
Lo2
Lo3
S0/0interfacetoR2
F0/0interfacetoR4
Lo0
Lo1
Lo2
Lo3
F0/0interfacetoR3

R4

3.3.8.3/24
3.3.9.3/24
3.3.10.3/24
3.3.11.3/24
131.1.23.3/24
131.1.34.3/24
4.4.12.4/24
4.4.13.4/24
4.4.14.4/24
4.4.15.4/24
131.1.34.4/24

LabSetup:
R1andR2sF0/0interfaceshouldbeconfiguredinVLAN12.
R3andR4sF0/0interfaceshouldbeconfiguredinVLAN34.

R2andR3sFramerelayconnectionshouldbeconfiguredinamultipoint
manner.Donotuseasubinterfacetoaccomplishthistask.
Task1
ConfigureEIGRPAS100onallroutersandadvertisetheirdirectlyconnectednetworks.

OnR1
R1(config)#routereigrp100
R1(configrouter)#noau
R1(configrouter)#netw131.1.0.0
R1(configrouter)#netw1.0.0.0

OnR2
R2(config)#routereigrp100
R2(configrouter)#noau
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0

OnR3
R3(configif)#routereigrp100

www.ccieuniversity.com

R3(configrouter)#noau
R3(configrouter)#netw131.1.0.0
R3(configrouter)#netw3.0.0.0

OnR4
R4(configif)#routereigrp100
R4(configrouter)#noau
R4(configrouter)#netw131.1.0.0
R4(configrouter)#netw4.0.0.0

Task2
ConfigureR2suchthatitadvertisesasummaryrouteforitsLoopbackinterfacestoR3.

InEigrproutingprotocol,summarizationcanbeperformedonanyrouter,inEigrp
summarizationmustbeperformedintheinterfaceconfigurationmode.

OnR2
R2(configrouter)#intS0/0
R2(configif)#ipsummaryaddresseigrp1002.2.4.0255.255.252.0

Toverifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/156160]via131.1.12.1,00:01:17,FastEthernet0/0
D1.1.1.0[90/156160] via131.1.12.1,00:01:17,FastEthernet0/0
D1.1.2.0[90/156160]via131.1.12.1,00:01:17,FastEthernet0/0

www.ccieuniversity.com

D1.1.3.0[90/156160]via131.1.12.1,00:01:17,FastEthernet0/0
2.0.0.0/8isvariablysubnetted,5subnets,2masks
C2.2.4.0/24isdirectlyconnected,Loopback0
D2.2.4.0/22isasummary,00:01:17,Null0
Note,whensummarizationis
C2.2.5.0/24isdirectlyconnected,Loopback1
configured,Eigrpwillinjecta
C2.2.6.0/24isdirectlyconnected,Loopback2
discardrouteforloopavoidance
C2.2.7.0/24isdirectlyconnected,Loopback3
3.0.0.0/24issubnetted,4subnets
D3.3.8.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D3.3.9.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D
3.3.10.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
D3.3.11.0[90/2297856]via131.1.23.3,00:01:18,Serial0/0
4.0.0.0/24issubnetted,4subnets
D4.4.12.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D4.4.13.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D4.4.14.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
D4.4.15.0[90/2300416]via131.1.23.3,00:01:18,Serial0/0
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0
D131.1.34.0[90/2172416]via131.1.23.3,00:01:18,Serial0/0
R2#

OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D1.1.1.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D1.1.2.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
D1.1.3.0[90/2300416]via131.1.23.2,00:11:26,Serial0/0
2.0.0.0/22issubnetted,1subnets
D
2.2.4.0[90/2297856]via131.1.23.2,00:03:55,Serial0/0
3.0.0.0/24issubnetted,4subnets

www.ccieuniversity.com

C3.3.8.0isdirectlyconnected,Loopback0
C3.3.9.0isdirectlyconnected,Loopback1
C3.3.10.0isdirectlyconnected,Loopback2
C
3.3.11.0isdirectlyconnected,Loopback3
4.0.0.0/24issubnetted,4subnets
D4.4.12.0[90/156160]via131.1.34.4,00:11:05,FastEthernet0/0
D4.4.13.0[90/156160]via131.1.34.4,00:11:05,FastEthernet0/0
D4.4.14.0[90/156160]via131.1.34.4,00:11:05,FastEthernet0/0
D4.4.15.0[90/156160]via131.1.34.4,00:11:05,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
D131.1.12.0[90/2172416]via131.1.23.2,00:11:27,Serial0/0
C131.1.23.0isdirectlyconnected,Serial0/0
C131.1.34.0isdirectlyconnected,FastEthernet0/0

Task3
R2shouldsummarizeitsloopbackinterfacesandadvertiseasinglesummaryrouteplus
allthespecificroutestoR1.

TheleakmapwasintroducedinIOS12.3(14)T anditmustbeconfiguredunderthe
physicalinterfaceandNOTasubinterface.
Configuringleakmapoptionallowsustoadvertiseacomponentroute(Oneor
morespecificnetworksofasummaryroute)thatwouldotherwisebesuppressedby
themanualsummarization.
Therearethreerulestoremember:
Iftheleakmapisconfiguredtoreferencearoutemapthatdoesnotexist,
onlythesummaryrouteisadvertisedandthemorespecificroutesare
suppressed.
Iftheleakmapisconfiguredtoreferencearoutemapandtheroutemapis
referencinganaccesslistthatdoesNOTexist,thenthesummaryrouteplus
allthespecificroutesareadvertised.
Iftheleakmapisconfiguredtoreferencearoutemapandtheroutemap
matchesonanaccesslist,allthepermittednetworksbytheaccesslistwillbe
advertisedalongwiththesummaryroute.

OnR2
R2(config)#intF0/0
R2(configif)#ipsummaryaddresseigrp1002.2.4.0255.255.252.0leakmapTEST21
R2(config)#routemapTEST21permit10
R2(configroutemap)#matchipaddr99

www.ccieuniversity.com

R2(configroutemap)#exit
Note,theleakmapisreferencingaroutemapandtheroutemapismatchingonan
accesslistthatdoesnotexist,therefore,thesummaryrouteplusallthespecific
routesareadvertised.Iftheroutemapdoesnot haveamatchcommandconfigured
thesamewillresult.

ToVerifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
Notethesummaryroute+
allthespecificroutes
areadvertisedtoR1

1.0.0.0/24issubnetted,4subnets
C1.1.0.0isdirectlyconnected,Loopback0
C1.1.1.0isdirectlyconnected,Loopback1
C1.1.2.0isdirectlyconnected,Loopback2
C1.1.3.0isdirectlyconnected,Loopback3
2.0.0.0/8isvariablysubnetted,5subnets,2masks
D2.2.4.0/24[90/156160]via131.1.12.2,00:00:47,FastEthernet0/0
D2.2.4.0/22[90/156160]via131.1.12.2,00:01:15,FastEthernet0/0
D2.2.5.0/24[90/156160]via131.1.12.2,00:00:47,FastEthernet0/0
D2.2.6.0/24[90/156160]via131.1.12.2,00:00:48,FastEthernet0/0
D
2.2.7.0/24[90/156160]via131.1.12.2,00:00:48,FastEthernet0/0
3.0.0.0/24issubnetted,4subnets
D3.3.8.0[90/2300416]via131.1.12.2,00:18:00,FastEthernet0/0
D3.3.9.0[90/2300416]via131.1.12.2,00:18:01,FastEthernet0/0
D
3.3.10.0[90/2300416]via131.1.12.2,00:18:01,FastEthernet0/0
D3.3.11.0[90/2300416]via131.1.12.2,00:18:01,FastEthernet0/0
4.0.0.0/24issubnetted,4subnets
D4.4.12.0[90/2302976]via131.1.12.2,00:17:40,FastEthernet0/0
D
4.4.13.0[90/2302976]via131.1.12.2,00:17:40,FastEthernet0/0
D4.4.14.0[90/2302976]via131.1.12.2,00:17:40,FastEthernet0/0
D4.4.15.0[90/2302976]via131.1.12.2,00:17:40,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
C
131.1.12.0isdirectlyconnected,FastEthernet0/0

www.ccieuniversity.com

D131.1.23.0[90/2172416]via131.1.12.2,00:18:15,FastEthernet0/0
D131.1.34.0[90/2174976]via131.1.12.2,00:18:02,FastEthernet0/0
R1#

Task4
ConfigureR4tosummarizeitsloopbackinterfacesandadvertiseasummaryrouteplus
network4.4.13.0/24toR3.

OnR4
R4(config)#IntF0/0
R4(configif)#ipsummaryaddresseigrp1004.4.12.0255.255.252.0leakmapTEST43
R4(config)#routemapTEST43permit10
R4(configroutemap)#matchipaddr43
R4(config)#accesslist43permit4.4.13.00.0.0.255

Toverifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D1.1.1.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D1.1.2.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
D1.1.3.0[90/2300416]via131.1.23.2,01:47:09,Serial0/0
2.0.0.0/22issubnetted,1subnets
D2.2.4.0[90/2297856]via131.1.23.2,01:39:38,Serial0/0

www.ccieuniversity.com

3.0.0.0/24issubnetted,4subnets
C3.3.8.0isdirectlyconnected,Loopback0
C3.3.9.0isdirectlyconnected,Loopback1
C3.3.10.0isdirectlyconnected,Loopback2
C3.3.11.0isdirectlyconnected,Loopback3
4.0.0.0/8isvariablysubnetted,2subnets,2masks
D4.4.12.0/22[90/156160]via131.1.34.4,00:01:35,FastEthernet0/0
D4.4.13.0/24[90/156160]via131.1.34.4,00:01:05,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
D131.1.12.0 [90/2172416]via131.1.23.2,01:47:12,Serial0/0
C131.1.23.0isdirectlyconnected,Serial0/0
C131.1.34.0isdirectlyconnected,FastEthernet0/0
R3#

Task5
ConfigureR3tosummarizeitsloopbackinterfacesandadvertiseasinglesummary plus
3.3.10.0/24and3.3.11.0/24toR4.

OnR3
R3(config)#intF0/0
R3(configif)#ipsummaryaddresseigrp1003.3.8.0255.255.252.0leakmapTEST34
R3(config)#routemapTEST34permit10
R3(configroutemap)#matchipaddr34
R3(config)#accesslist34permit3.3.10.00.0.0.255
R3(config)#accesslist34permit3.3.11.00.0.0.255

Toverifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute

www.ccieuniversity.com

Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/2302976]via131.1.34.3,00:07:13,FastEthernet0/0
D1.1.1.0[90/2302976]via131.1.34.3,00:07:13,FastEthernet0/0
D1.1.2.0[90/2302976]via131.1.34.3,00:07:13,FastEthernet0/0
D1.1.3.0[90/2302976]via131.1.34.3,00:07:13,FastEthernet0/0
2.0.0.0/22issubnetted,1subnets
D2.2.4.0 [90/2300416]via131.1.34.3,00:07:13,FastEthernet0/0
3.0.0.0/8isvariablysubnetted,3subnets,2masks
D3.3.8.0/22[90/156160]via131.1.34.3,00:00:41,FastEthernet0/0
D3.3.10.0/24[90/156160]via131.1.34.3,00:07:14,FastEthernet0/0
D3.3.11.0/24[90/156160]via131.1.34.3,00:07:14,FastEthernet0/0
4.0.0.0/8isvariablysubnetted,5subnets,2masks
C4.4.12.0/24isdirectlyconnected,Loopback0
D4.4.12.0/22isasummary,00:07:17,Null0
C4.4.13.0/24isdirectlyconnected,Loopback1
C4.4.14.0/24isdirectlyconnected,Loopback2
C4.4.15.0/24isdirectlyconnected,Loopback3
131.1.0.0/24issubnetted,3subnets
D131.1.12.0[90/2174976]via131.1.34.3,00:07:17,FastEthernet0/0
D131.1.23.0[90/2172416]via131.1.34.3,00:07:17,FastEthernet0/0
C131.1.34.0isdirectlyconnected,FastEthernet0/0
R4#

Task6
ConfigureR4toinjectadefaultrouteintoEigrp100routingdomain.DoNOTuseany
globalorrouterconfigurationcommandtoaccomplishthistask.

OnR4
R4(config)#intF0/0
R4(configif)#ipsummaryaddresseigrp1000.0.0.00.0.0.0

ToVerifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea

www.ccieuniversity.com

N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortis131.1.34.4tonetwork0.0.0.0
1.0.0.0/24issubnetted,4subnets
D1.1.0.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D1.1.1.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D1.1.2.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
D1.1.3.0[90/2300416]via131.1.23.2,00:10:40,Serial0/0
2.0.0.0/22issubnetted,1subnets
D2.2.4.0[90/2297856]via131.1.23.2,00:10:40,Serial0/0
3.0.0.0/8isvariablysubnetted,5subnets,2masks
C3.3.8.0/24isdirectlyconnected,Loopback0
D3.3.8.0/22isasummary,00:10:41,Null0
C
3.3.9.0/24isdirectlyconnected,Loopback1
C3.3.10.0/24isdirectlyconnected,Loopback2
C3.3.11.0/24isdirectlyconnected,Loopback3
4.0.0.0/8isvariablysubnetted,2subnets,2masks
D4.4.12.0/22[90/156160]via131.1.34.4,00:10:42,FastEthernet0/0
D4.4.13.0/24[90/156160]via131.1.34.4,00:10:42,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
D131.1.12.0[90/2172416]via131.1.23.2,00:10:42,Serial0/0
C131.1.23.0isdirectlyconnected,Serial0/0
C131.1.34.0isdirectlyconnected,FastEthernet0/0
D*0.0.0.0/0[90/30720]via131.1.34.4,00:00:11,FastEthernet0/0
R3#

Task7
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab4
EIGRPLoadBalancing

R1
F0/0
F0/0

R2
S0/0

FrameRelay

S0/0

S0/0

R3

R4
F0/0

F0/0

F0/0

R5

www.ccieuniversity.com

LabSetup:
R1andR2sF0/0interfaceshouldbeinVLAN12
R3,R4andR5sF0/0interfaceshouldbeinVLAN345
Theframerelaycloudshouldbeconfiguredinahubandspokemanner,withR2
beingthehubandR3andR4asthespokes,R2shouldbeconfiguredwithtwo
subinterfacesinamultipointmanner,DLCI203connectingR2toR3andDLCI
204connectingR2toR4.
R3andR4shouldbeconfiguredinamultipointmannerthesetworoutersshould
notbeconfiguredwithasubinterface.

IPAddressing
Router
R1
R2

R3

R4

R5

Interface
Lo0
F0/0interfacetoR2
Lo0
F/RinterfacetoR3
F/RinterfacetoR4
F0/0interfacetoR1
Lo0
F/RinterfacetoR2
F0/0interfacetoR4andR5
Lo0
F/RinterfacetoR2
F0/0interfacetoR3andR5
Lo0
F0/0interfacetoR3andR4

IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.23.2/24
131.1.24.2/24
131.1.12.2/24
3.3.3.3/8
131.1.23.3/24
131.1.100.3/24
4.4.4.4/8
131.1.24.4/24
131.1.100.4/24
5.5.5.5/8
131.1.100.5/24

Task1
ConfigureEigrp100onallroutersandadvertisetheirdirectlyconnectednetworks.
EnsurethattheseroutershaveNLRItoalltheprefixesadvertisedinthistopology.
TheseroutersshouldNOTtakesuboptimalroutestoreachanynetwork.

OnR1
R1(config)#routereigrp100
R1(configrouter)#noau

www.ccieuniversity.com

R1(configrouter)#netw131.1.0.0
R1(configrouter)#netw1.0.0.0

OnR2
R2(config)#routereigrp100
R2(configrouter)#noau
R2(configrouter)#netw131.1.0.0
R2(configrouter)#netw2.0.0.0

OnR3
R3(config)#routereigrp100
R3(configrouter)#netw131.1.0.0
R3(configrouter)#netw3.0.0.0
R3(configrouter)#noau

OnR4
R4(config)#routereigrp100
R4(configrouter)#noau
R4(configrouter)#netw131.1.0.0
R4(configrouter)#netw4.0.0.0

OnR5
R5(config)#routereigrp100
R5(configrouter)#noau
R5(configrouter)#netw131.1.0.0
R5(configrouter)#netw5.0.0.0

Toverifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute

www.ccieuniversity.com

Gatewayoflastresortisnotset
D1.0.0.0/8[90/2300416]via131.1.23.2,00:00:44,Serial0/0
D2.0.0.0/8[90/2297856]via131.1.23.2,00:00:44,Serial0/0
C3.0.0.0/8isdirectlyconnected,Loopback0
D4.0.0.0/8[90/156160]via131.1.100.4,00:00:42,FastEthernet0/0
D5.0.0.0/8[90/156160]via131.1.100.5,00:00:23,FastEthernet0/0
131.1.0.0/24issubnetted,4subnets
D131.1.12.0[90/2172416]via131.1.23.2,00:00:44,Serial0/0
C131.1.23.0isdirectlyconnected,Serial0/0
D131.1.24.0[90/2172416]via131.1.100.4,00:00:46,FastEthernet0/0
C131.1.100.0isdirectlyconnected,FastEthernet0/0

Task2
ConfigureR2suchthatitwaits60minutesbeforedeclaringaroutetobeSIA.

OnR2
R2(configif)#routereigrp100
R2(configrouter)#timersactivetime60

Task3
ConfigureR5suchthattherouterdisablestheSIAtimersandpermitstheroutingwait
timetoremainactiveindefinitely

On R5
R5(configif)#routereigrp100
R5(configrouter)#timersactivetimedisabled

Task4
OnR2,changethebandwidthoftheserialsubinterfaceconnectiontoR3tohalfofits
defaultvalue.

OnR2

www.ccieuniversity.com

R2(config)#intS0/0.23
R2(configsubif)#bandwidth772

Task5
EnsurethatR2performsunequalcostloadbalancingforallthedownstreamnetworks.

TheVariancecommandallowsustoperformunequalcostloadbalancingifthe
feasibilityconditionismet.Onlypathsthatarefeasiblecanbeusedforload
balancingandincludedintheroutingtable.Alwaysrememberthefollowingrules:
Theadvertiseddistancemustbelowerthanthelocalroutersfeasibledistance.
Themultiplier(Variancecommandsvalue)timesthelocalbestmetricforthe
destinationmustbegreaterthanorequaltothemetricthroughthenextrouter.
Thepathmustbeintheroutingtablefortheroutertouseit.
Inthiscasethebestpathtonetworks5.0.0.0/8and131.1.100.0/24isreachable
throughR4.Wehavetofindout thecompositemetricthroughR4asfollows:

OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSA externaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
D1.0.0.0/8[90/156160]via131.1.12.1,00:02:18,FastEthernet0/0
C2.0.0.0/8isdirectlyconnected,Loopback0
D3.0.0.0/8[90/2300416]via131.1.24.4,00:02:18,Serial0/0.24
D4.0.0.0/8[90/2297856]via131.1.24.4,00:02:18,Serial0/0.24
D5.0.0.0/8[90/2300416]via131.1.24.4,00:02:18,Serial0/0.24
131.1.0.0/24issubnetted,4subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24
D131.1.100.0[90/2172416]via131.1.24.4,00:02:20,Serial0/0.24
R2#

www.ccieuniversity.com

Note,thecostofthepaththroughR4toreachnetwork5.0.0.0/8is2300416and
network131.1.100.0/24is2172416.
ThenextstepistofigureoutthecostoftheroutethroughR3,thefollowing
commandwillrevealthatinformation:

OnR2
R2#Showipeigrptopology5.0.0.0/8
IPEIGRP(AS100):Topologyentryfor5.0.0.0/8
StateisPassive,Query originflagis1,1Successor(s),FDis2300416
RoutingDescriptorBlocks:
131.1.24.4(Serial0/0.24),from131.1.24.4,Sendflagis0x0
Compositemetricis(2300416/156160),RouteisInternal
Vectormetric:
Minimumbandwidthis1544Kbit
Totaldelayis25100microseconds
Reliabilityis255/255
Loadis1/255
MinimumMTUis1500
Hopcountis2
131.1.23.3(Serial0/0.23),from131.1.23.3,Sendflagis0x0
Compositemetricis(3958528/156160),RouteisInternal
Vectormetric:
Minimumbandwidthis772Kbit
Totaldelayis25100microseconds
Reliabilityis255/255
Loadis1/255
MinimumMTUis1500
Hopcountis2
R2#
Note,thecostthroughR3is3958528
Thenextstepistoperformthefollowingdivision:
3958528(ThecostthroughR3)/2300416(ThecostthroughR4)
Theresultis1.720rounduptothenextvalue,whichis2
Ifthesametasksareperformedfornetwork131.1.100.0/24,youshouldseethe
following:
3830528/ 2172416=1.7632roundupto2
Thelaststepistoconfigurethevariancecommand,asfollows:

OnR2

www.ccieuniversity.com

R2(config)#routereigrp100
R2(configrouter)#variance2

Toverifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
D1.0.0.0/8[90/156160]via131.1.12.1,00:03:22,FastEthernet0/0
C2.0.0.0/8isdirectlyconnected,Loopback0
D3.0.0.0/8[90/2300416]via131.1.24.4,00:03:22,Serial0/0.24
[90/3955968]via131.1.23.3,00:03:22,Serial0/0.23
D4.0.0.0/8[90/2297856]via131.1.24.4,00:03:22,Serial0/0.24
[90/3958528]via131.1.23.3,00:03:22,Serial0/0.23
D5.0.0.0/8[90/2300416]via131.1.24.4,00:03:22,Serial0/0.24
[90/3958528]via131.1.23.3,00:03:22, Serial0/0.23
131.1.0.0/24issubnetted,4subnets
C131.1.12.0isdirectlyconnected,FastEthernet0/0
C131.1.23.0isdirectlyconnected,Serial0/0.23
C131.1.24.0isdirectlyconnected,Serial0/0.24
D131.1.100.0[90/2172416] via131.1.24.4,00:03:23,Serial0/0.24
[90/3830528]via131.1.23.3,00:03:23,Serial0/0.23
R2#
InthiscaseEigrpwillperformaninverseproportionalloadbalancingandthe
variancecommandmeansthateverytwooutofthebestpath,itwillsendoneout
ofthesecondbestpath.Thefollowingcommandrevealstheproportions:

OnR2
R2#Showiproute5.0.0.0
Routingentryfor5.0.0.0/8
Knownvia"eigrp100",distance90,metric2300416,typeinternal

www.ccieuniversity.com

Redistributingviaeigrp100
Lastupdatefrom131.1.23.3on Serial0/0.23,00:05:18ago
RoutingDescriptorBlocks:
*131.1.24.4,from131.1.24.4,00:05:18ago,viaSerial0/0.24
Routemetricis2300416,trafficsharecountis240
Totaldelayis25100microseconds,minimumbandwidthis1544Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2
131.1.23.3,from131.1.23.3,00:05:18ago,viaSerial0/0.23
Routemetricis3958528,trafficsharecountis139
Totaldelayis25100microseconds,minimumbandwidthis772Kbit
Reliability255/255,minimumMTU1500bytes
Loading1/255,Hops2

Task6
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab5
EIGRPauthenticationandadvanced
configuration

R1

R2
S0/0

S0/0
FrameRelay

LabSetup:
Configuretheframerelayroutersinapointtopointmanner.

IPaddress:
Routers
R1
R2

Interface
Lo0
FramerelayconnectiontoR2
Lo0
FramerelayconnectiontoR1

IPaddress
1.1.1.1 /8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24

www.ccieuniversity.com

Task1
ConfigureEIGRP100ontheroutersandadvertisetheirdirectlyconnectednetworks.

OnR1
R1(config)#routereigrp100
R1(configrouter)#noau
R1(configrouter)#netw131.1.0.0
R1(configrouter)#netw1.0.0.0

OnR2
R2(config)#routereigrp100
R2(configrouter)#noau
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw131.1.0.0

Task2
Enableauthenticationontherouters,useciscoasthepassword.

EigrpuseskeychainbaseauthenticationjustlikeRIPv2,theonlyauthentication
modeavailableinEigrpisMD5.

On BothRouters
(config)#keychainTEST
(configkeychain)#key1
(configkeychainkey)#keystringcisco

OnR1
R1(config)#intS0/0.12
R1(configsubif)#ipauthenticationkeychaineigrp100TEST
R1(configsubif)#ipauthenticationmodeeigrp100md5

OnR2
R2(config)#intS0/0.21
R2(configsubif)#ipauthenticationkeychaineigrp100TEST
R2(configsubif)#ipauthenticationmodeeigrp100md5

www.ccieuniversity.com

Task3
R1shouldbeconfiguredtologneighborwarningmessagesfortheEIGRP100andrepeat
thewarningmessagesevery10minutes.

ToenabletheloggingofEigrpneighborwarningmessagesyoumustentereigrp
logneighborwarningscommandundertheroutereigrpprocess.Thiswarning
messagecanberepeatedbasedonthenumberofsecondsconfigured.
Bydefault,neighborwarningmessagesarelogged.Ifthisbehaviorneedstobe
changed,thennoeigrplogneighborwarningmessagemustbeused.

OnR1
R1(configsubif)#routereigrp100
R1(configrouter)#eigrplogneighborwarning600

Task4
R2shouldnotloganyofitsadjacencychanges.

BydefaultEigrplogschangesinEigrpneighboradjacencies.Ifthisisnotneeded,
thisfeaturecanbeturnedoffusingthefollowingconfiguration:

OnR2
R2(config)#routereigrp100
R2(configrouter)#noeigrplogneighborchanges

Task5
ConfigureR2suchthatitadvertisesEIGRProuteswithgreaterthan110hopsas
unreachable.

OnR2
R2(config)#routereigrp100
R2(configrouter)#metricmaximumhops110
Theabovecommandwilladvertisetherouteswithahopcounthigherthan110as
unreachable,thedefaultsettingis100hops,anditcanbeincreasedupto255.

www.ccieuniversity.com

Task6
CreateastaticrouteonR2fornetwork3.0.0.0/8reachablebyR2andredistributethe
staticrouteintoEIGRProutingprocess.EnsurethatR1canseethisnetworkinitsrouting
table.

OnR2
R2(config)#iproute3.0.0.0255.0.0.0Null0
R2(config)#routereigrp100
R2(configrouter)#redistributestaticmetric15442000025511500

Task7
OnR1,changetheadministrativedistanceofallexternalnetworksto110.

Beforewechangetheadministrativedistanceoftheexternalroutes,weshouldsee
thedefaultsettings:

OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
D2.0.0.0/8[90/2297856]via131.1.12.2,00:00:05,Serial0/0.12
DEX3.0.0.0/8[170/7289856]via131.1.12.2,00:00:05,Serial0/0.12
131.1.0.0/24issubnetted,1subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
Note,bydefaulttheadministrativedistanceofEigrpexternalnetworksis170.

www.ccieuniversity.com

ThefollowingcommandchangestheadministrativedistanceofEigrpexternal
routesto110.Rememberthiswillaffecttherouteronwhichitsconfiguredon.

OnR1
R1(config)#routereigrp100
R1(configrouter)#distanceeigrp90110
Thefirstvalueafterthedistanceeigrpcommandspecifiestheadministrative
distanceofEigrpinternalroutesandthesecondvaluespecifiestheadministrative
distanceofEigrpexternalroutes.

ToVerifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
D2.0.0.0/8[90/2297856]via131.1.12.2,00:00:12,Serial0/0.12
DEX3.0.0.0/8[110/7289856]via131.1.12.2,00:00:12,Serial0/0.12
131.1.0.0/24issubnetted,1subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
R1#

Task8
EnsurethatR1neverusesmorethan45%ofthebandwidthforEIGRPupdatesyou
shoulduseanEIGRPspecificcommandtoaccomplishthistask.

OnR1

www.ccieuniversity.com

R1(configrouter)#intS0/0.12
R1(configsubif)#ipbandwidthpercenteigrp10045
TheabovecommandcanbeusedtoconfigurethebandwidththatEigrpusesonan
interface.

Task9
YouwereaskedtolimitEigrpsBandwidthutilizationonR1to386Kbits/sec,butyou
cannotrememberthecommand,useanothermethodtoaccomplishthesametask.

OnR1
R1(configrouter)#intS0/0.12
R1(configsubif)#noipbandwidthpercenteigrp10045
R1(configsubif)#bandwidth772
BydefaultEigrputilizes50%ofthebandwidth,ifyoumultiplythedesiredvalueby
two(Inthiscase772)andsetthebandwidthoftheinterfacetothatnumber,Eigrp
willusehalfofthatnumberwhichisthedesiredvalue.

Task10
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab6
EIGRPStub

R1

R2
.1

.2
131.1.12.0/24

S0/0

FrameRelay

S0/0

Labsetup:
ConfiguretheIPaddressingandFramerelayconnectionbetweentherouters
accordingtotheabovediagram.Ensurethattheroutersareconfiguredinapoint
topointmanner.
ConfigureF0/0interfaceontheroutersasfollowing:
R1sF0/0=200.1.1.1/24,andR2sF0/0=200.2.2.2/24
ConfigurethefollowingLoopbackinterfacesonR1andR2andadvertisethemin
EIGRP100:
Router Interface IPaddress
R1
Lo0
1.1.0.1/24
Lo1
1.1.1.1/24
Lo2
1.1.2.1/24
Lo3
1.1.3.1/24
R2

Lo0
Lo1
Lo2
Lo3

2.2.0.2/24
2.2.1.2/24
2.2.2.2/24
2.2.3.2/24

www.ccieuniversity.com
R1andR2shouldsummarizetheLoopbackinterfacesandadvertiseasingle
summarytoeachother.
CreatethefollowingstaticroutesonR1andR2andredistributetheminEIGRP:
Router Staticroute
R1
Createastaticroutetonetwork11.0.0.0/8viaF0/0
R2
Createastaticroutetonetwork22.0.0.0/8viaF0/0
AdvertisetheFastEthernetinterfacesoftheroutersasfollows:
Routers Interface
R1
F0/0(200.1.1.0/24)
R2
F0/0(200.2.2.0/24)

Routingprotocol
RIPv2
RIPv2

RedistributetheRIProutesintoEIGRProutingprotocol.

Theabovebulletitemsmustbecompletedinordertotestthenextsixscenarios:

www.ccieuniversity.com

TestEIGRPstubroutingoptionsonR1andR2,andanswerthefollowingquestions:

TEST#1
ConfigureEigrpstubroutingonR1usingtheconnectedoptions,andfillthefollowing
chart
OnR1
Routereigrp100
Eigrpstubconnected
Test#1iscompletedsothestudentswillunderstandwhattheyhavetodoforthenext5
tests.The1st columnidentifiesthenetworks,thesecondcolumniswhatR2seesinits
routingtable,andthethirdcolumniswhatR1seesinitsroutingtable.

Connected

R2routingtable R1sroutingtable
NO
YES

R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.2.1.0/24
1.1.2.0/242.2.2.0/24
1.1.3.0/242.2.3.0/24
Summarized

Becausetheyare
theconnected
routes

Becausethesummarized
routeswillincludethemore
specificroutes.

NO

YES

R1=1.1.0.0/22

Becauseonly
connectedroutes
areneeded

STUBroutingdoesNOT
affectthisrouter

NO

YES

Becauseonly
connectedroutes
areneeded.

STUBroutingdoesNOT
affectthisrouter

NO

YES

Becauseonly
connectedroutes
areneeded.

STUBroutingdoesNOT
affectthisrouter

R2=2.2.0.0/22
Static
R1=11.0.0.0/8
R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0/24
22.0.0.0/8

AfterR1wasconfiguredwithEigrpstuboption,enteraShowiprouteandwrite
downthetypeofroutesinyourroutingtable.
Aftercompletingthechart,removetheeigrpstubroutingoptionandensurethatall
theroutesarereceivedbybothroutersbeforeproceedingtothenextTEST.

www.ccieuniversity.com

TEST#2
ConfigureEigrpstubroutingonR1usingthesummaryoptions,andfillthefollowing
chart:
OnR1
Routereigrp100
Noeigrpconnected
Eigrpstubsummary

Connected
R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.2.1.0/24
1.1.2.0/242.2.2.0/24
1.1.3.0/242.2.3.0/24

Summarized
R1=1.1.0.0/22
R2=2.2.0.0/22

Static
R1=11.0.0.0/8
R2=22.0.0.0/8

Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0
22.0.0.0/8

R2routingtable
NO

R1sroutingtable
NO

Becausethe
summarizedroutes
willincludethe
morespecific
routes.
YES

Becausethesummarized
routeswillincludethemore
specificroutes.

YES

Becausetheyarethe STUBroutingdoesNOT
summarizedroutes, affectthisrouter.
andsummaryoption
wasconfigured.
NO
YES
Becauseonlythe
summaryoptionis
configured.

STUBroutingdoesNOT
affectthisrouter

NO

YES

Becauseonlythe
summaryoptionis
configured

STUBroutingdoesNOT
affectthisrouter

Removetheeigrpstubroutingoptionandensurethatalltheroutesarereceivedby
bothroutersbeforeproceedingtothenexttest.

www.ccieuniversity.com

TEST#3

ConfigureEigrpstubroutingonR1usingtheStaticoptions,andfillthefollowingchart:
OnR1
Routereigrp100
Noeigrpsummary
Eigrpstubstatic

R2routingtable
NO

R1sroutingtable
NO

R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.2.1.0/24
1.1.2.0/242.2.2.0/24
1.1.3.0/242.2.3.0/24
Summarized

Becauseonlythestatic
optionisconfigured

NO

Becausethe
summarizedroutes
willincludethemore
specificroutes.
YES

R1=1.1.0.0/22

Becauseonlythestatic
optionisconfigured

STUBroutingdoes
NOTaffectthisrouter

YES

YES

Becausethestaticoption
wasconfigured.

STUBroutingdoes
NOTaffectthisrouter

NO

YES

Becauseonlythestatic
optionisconfigured

STUBroutingdoes
NOTaffectthisrouter

Connected

R2=2.2.0.0/22
Static
R1=11.0.0.0/8
R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0
22.0.0.0/8

Removetheeigrpstubroutingoptionandensurethatalltheroutesarereceivedby
bothroutersbeforeproceedingtothenexttest.

www.ccieuniversity.com

TEST#4
ConfigureEigrpstubroutingonR1usingthereceiveonlyoptions,andfillthefollowing
chart:
OnR1
Routereigrp100
Noeigrpstubstatic
Eigrpstubreceiveonly

R2routingtable
NO

R1sroutingtable
NO

R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.1.1.0/24
1.1.2.0/242.1.2.0/24
1.1.3.0/242.1.3.0/24
Summarized

BecauseR1isconfigured
inreceiveonly,therefore
itllNOTadvertiseany
routestoR2
NO

Becausethe
summarizedroutes
willincludethemore
specificroutes.
YES

R1=1.1.0.0/22

BecauseR1isconfigured STUBroutingdoes
inreceiveonly,therefore NOTaffectthisrouter
itllNOTadvertiseany
routestoR2
NO
YES

Connected

R2=2.2.0.0/22
Static
R1=11.0.0.0/8
R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0/24
22.0.0.0/8

BecauseR1isconfigured STUBroutingdoes
inreceiveonly,therefore NOTaffectthisrouter
itllNOTadvertiseany
routestoR2
NO
YES
BecauseR1isconfigured STUBroutingdoes
inreceiveonly,therefore NOTaffectthisrouter
itllNOTadvertiseany
routestoR2

Removetheeigrpstubroutingoptionandensurethatalltheroutesarereceivedby
bothroutersbeforeproceedingtothenexttest.

www.ccieuniversity.com

TEST#5
ConfigureEigrpstubroutingonR1usingtheredistributedoptions,andfillthe
followingchart:
OnR1
Routereigrp100
Noeigrpstubreceiveonly
Eigrpstubredistributed

R2routingtable
NO

R1sroutingtable
NO

R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.1.1.0/24
1.1.2.0/242.1.2.0/24
1.1.3.0/242.1.3.0/24
Summarized

Becausethesummarized
routeswillincludethe
morespecificroutes.

Becausethe
summarizedroutes
willincludethemore
specificroutes.
YES

R1=1.1.0.0/22

Becausethisoptionalso
enablesConnected,
Summaryaswellas
Redistributed.

STUBroutingdoes
NOTaffectthis
router

YES

YES

Becausetheserouteswill
showupasredistributed.

STUBroutingdoes
NOTaffectthis
router

YES

YES

Becausethisoptionalso
enablesConnected,
Summaryaswellas
Redistributed.

STUBroutingdoes
NOTaffectthis
router

Connected

R2=2.2.0.0/22

Static
R1=11.0.0.0/8

YES

R2=22.0.0.0/8
Redistributed
R1=200.1.1.0/24
11.0.0.0/8
R2=200.2.2.0/24
22.0.0.0/8

Removetheeigrpstubroutingoptionandensurethatalltheroutesarereceivedby
bothroutersbeforeproceedingtothenexttest.

www.ccieuniversity.com

TEST#6
ConfigureEigrpstubroutingonR1usingthecommandwithoutanoptions,andfillthe
followingchart:
OnR1
Routereigrp100
Noeigrpredistributed
Eigrpstub

Connected
R1=1.1.0.0/24R2=2.2.0.0/24
1.1.1.0/242.1.1.0/24
1.1.2.0/242.1.2.0/24
1.1.3.0/242.1.3.0/24

Summarized
R1=1.1.0.0/22
R2=2.2.0.0/22

Static
R1=11.0.0.0/8

R2routingtable
NO

R1sroutingtable
NO

Becausethesummarized
routeswillincludethe
morespecificroutes.The
connectedrouteswillbe
advertisedifthe
summarizationwasnot
performed.
YES

Becausethe
summarizedroutes
willincludethemore
specificroutes.

Becausethisoptionalso
enablesConnected,
SummaryaswellasStub.

STUBroutingdoes
NOTaffectthis
router

NO

YES

Staticroutesarenot
advertisedinthisoption.

STUBroutingdoes
NOTaffectthis
router

NO

YES

StaticroutesareNOT
advertisedinthisoption.

STUBroutingdoes
NOTaffectthis
router

R2=22.0.0.0/8

Redistributed
R1=200.1.1.0/24
11.0.0.0/8

YES

R2=200.2.2.0/2
22.0.0.0/8
Erasethestartupconfigandreloadtheroutersbeforeyouproceedtothenext
protocol.

www.ccieuniversity.com

Lab1
OptimizationofOSPFandAdjustingTimers

R1

R2
.1
S0/0

.2
FrameRelay

S0/0
F0/0.2

.3
F0/0
.3

R4
.4

. R3

FrameRelay

S0/0S0/0

LabSetup:
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.

R1andR2,R3andR4shouldbeconfiguredinaframerelaypointtopoint
manner.

IPAddressing
Router
R1
R2

Interface
Lo0
F/Rinterface
Lo0
F/Rinterface
F0/0

IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24

www.ccieuniversity.com

R3

R4

Lo0
F/Rinterface
F0/0
Lo0
F/Rinterface

3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24

Task1
ConfigureOSPFonallroutersandadvertisetheirdirectlyconnectednetworksinarea0.

OnR4
R4(config)#routerospf1
R4(configrouter)#net0.0.0.00.0.0.0are0

OnR3
R3(configif)#routerospf1
R3(configrouter)#network0.0.0.00.0.0.0are0

OnR2
R2(configif)#routerospf1
R2(configrouter)#netw0.0.0.00.0.0.0are0

OnR1
R1(configif)#routerospf1
R1(configrouter)#netw0.0.0.00.0.0.0are0

Task2
R4isgettingfloodedwithLSAtype6packetsensurethatR4doesnotgenerateasyslog
messageforthesepackets.

CiscoroutersdoNOTsupportLSAtype6packetsandeachtimeanOSPFrouter
receivesanMOSPF(LSAtype6)packetitsendsasyslogmessage.Iftherouters
receivemanyLSAtype6packetstheywillgeneratealargenumberofsyslog

www.ccieuniversity.com

messages.Thisfeatureshouldbedisabledtopreventthisfromoccurring.

OnR4
R4(config)#routerospf1
R4(configrouter)#ignorelsamospf

Task3
Toensurefastdetectionofaneighborbeingdown,configureR2andR3tosendtheir
hellosfourtimesasecondwithaholdtimeofonesecond.

OnR2
R2(config)#intf0/0
R2(configif)#ipospfdeadintervalminimalhellomultiplier4

OnR3
R3(configif)#intf0/0
R3(configif)#ipospfdeadintervalminimalhellomultiplier4
ThedeadintervalisadvertisedinOSPFhellopackets.Thevaluesofthisparameter
mustbethesamefortworoutersinorderforthemtoform aneighboradjacency.
Byspecifyingtheminimalandhellomultiplierkeywordswithamultiplier
value,youareenablingOSPFfasthellopackets.Theminimalkeywordsetsthe
deadintervalto1secondandthehellomultipliervaluesetsthenumber ofhello
packetssentduringthat1second.

Task4
EnsurethattheserouterslookupDNSnamesforuseinallOSPFshowcommands,test
thistasktoensureproperoperation.SincetherearenoDNSserversinthislabyoushould
usetheroutersforthatpurpose.

TotesttheOSPFShowcommandsbeforeimplementingthisfeature,enterthe
following:
Showipospfdatabaserouter
OSPFRouterwithID(1.1.1.1)(ProcessID1)

www.ccieuniversity.com

RouterLinkStates(Area0)
LSage:1575
Options:(NoTOScapability,DC)
LSType:RouterLinks
LinkStateID:1.1.1.1
AdvertisingRouter:1.1.1.1
LSSeqNumber:80000002
Checksum:0x1D3F
Length:60
NumberofLinks:3

Notetherouteridisdisplayed

OnAllRouters
(config)#ipospf namelookup
(config)#iphostR11.1.1.1
(config)#iphostR22.2.2.2
(config)#iphostR33.3.3.3
(config)#iphostR44.4.4.4

Showipospfdatabaserouter
OSPFRouterwithID(1.1.1.1)(ProcessID1)
RouterLinkStates(Area0)
LSage:1651
Options:(NoTOScapability,DC)
LSType:RouterLinks
LinkStateID:1.1.1.1
AdvertisingRouter:R1
LSSeqNumber:80000002
Checksum:0x1D3F
Length:60
NumberofLinks:3

Notethechange,itsreplacedbythenameconfigured
intheIPhostcommand.

Task5
ConfigureR2suchthatifitdoesnotreceiveanacknowledgmentfromR3foragiven
LSA,itwaitsfor10secondsbeforeitresendsthatgivenLSA.

www.ccieuniversity.com

OnR2
R2(config)#intf0/0
R2(configif)#ipospfretransmitinterval10
WhenanOSPFenabledroutersendsanLSAtoitsneighbor,itkeepstheLSAuntil
itreceivesanACKfromthatgivenneighbor.Iftheretransmissiontimerexpires
andtherouterreceivesnoACKs,therouterwillresendthatLSA.Thedefaulttimer
issetto5seconds,andtherangeis165535.

Task6
ConfigureR2suchthatitlimitsthenumberofnonselfgeneratedLSAsthatanOSPF
routingprocesscankeepintheOSPFLSDBto900.

OnR2
R2(configif)#routerospf1
R2(configrouter)#maxlsa900
BydefaultthenumberofnonselfgeneratedLSAsthatanOSPFroutingprocess
cankeepinthedatabaseisnotlimited.Tolimitthisnumber,wecanusethemax
lsacommandintherouterconfigurationmode.Thiscommandcontainsthe
followingfields:
Maxlsamaximumnumber[thresholdpercentage][warningonly][ignoretimeminutes]
[ignorecount#][resettimeminutes]
Maximumnumber ThemaximumnumberofnonselfgeneratedLSAsthatan
OSPFroutercankeepintheOSPFdatabase.
ThresholdpercentageThepercentageofthemaximumLSAnumber,as
specifiedbythemaximumnumber,atwhichawarningmessageislogged.The
defaultis75.
WarningonlyThisspecifiesthatonlyawarningmessageissentwhenthe
maximumlimitforLSAsisexceeded.
IgnoretimeminutesThisvaluespecifiesthetime,inminutes,toignoreall
neighborsafterthemaximumlimitofLSAshasbeenexceeded.Thedefaultis5
minutes.
Ignorecountcountnumber SpecifiesthenumberoftimestheOSPFprocess
canconsecutively beplacedintotheignorestate.Thedefaultis5times.The
routercannotexceedthisnumber.
Resettimeminutes Thisvaluespecifiesthetime,inminutes,afterwhichthe

www.ccieuniversity.com

ignorecountisresettozero.Thedefaultis10minutes.

Task7
TocontroltherateatwhichLSAupdatesoccur,R3shouldsettheinterpacketpacing
betweenconsecutiveLSUs(LinkstateUpdates)intheOSPFtransmissionqueueto60
milliseconds.

OnR3
R3(config)#routerospf1
R3(configrouter)#timerspacingretransmission60
Thiscounterspecifiestime(inmilliseconds)atwhichLSAsintheretransmission
queuearepaced.Thedefaultvalueis66millisecondsandtherangeis5 200
milliseconds.

Task8
R3andR4shouldexchangehellosevery15secondswithaholdtimeof60seconds.Do
NOTuseipospfdeadintervaltoaccomplishthistask.

OnR3
R3(configrouter)#IntS0/0.34
R3(configsubif)#ipospfhellointerval15

OnR4
R4(configrouter)#IntS0/0.43
R4(configsubif)#ipospfhellointerval15
Oncethehellointervalisset,OSPFprocesswillsetthedeadintervaltobefour
timesthehellointerval.Thedefaultvalueforthehellotimerisasfollows:
OnEthernetsegmentitssetto10seconds.
OnNonbroadcastnetworks,itssetto30seconds.

Toverifytheconfiguration:
OnR4

www.ccieuniversity.com

R4#ShowipospfintS0/0.43
Serial0/0.43isup,lineprotocolisup
InternetAddress131.1.34.4/24,Area0
ProcessID1,RouterID4.4.4.4,NetworkTypePOINT_TO_POINT,Cost:64
TransmitDelayis1sec,StatePOINT_TO_POINT,
Timerintervalsconfigured,Hello15,Dead60,Wait60,Retransmit5
oobresynctimeout60
Helloduein00:00:03
SupportsLinklocalSignaling(LLS)
(Therestoftheoutputisomitted)

Task9
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab2
Authentication
UsethetopologyandIPaddressingfromLab1

Task1
ConfiguretherouterswithOSPFroutingprotocolasfollows:
OnR1,allinterfacesshouldbeconfiguredinarea2
OnR2,theFramerelayandLoopback0interfaceshouldbeconfiguredinarea2,
andF0/0,Loopback1(22.2.2.2/8)shouldbeconfiguredinarea1.
OnR3,F0/0andLoopback0interfaceshouldbeconfiguredinarea1,andthe
framerelayandLoopback1(33.3.3.3/8)shouldbeconfiguredinarea0
OnR4,allinterfacesshouldbeconfiguredinarea0
TheseroutersshouldusetheirLo0interfacesIPaddressastheirOSPFrouterid.

OnR1
R1(config)#routerospf1
R1(configrouter)#routerid1.1.1.1
R1(configrouter)#netw0.0.0.00.0.0.0area2

OnR2
R2(config)#routerospf1
R2(configrouter)#routerid2.2.2.2
R2(configrouter)#netw131.1.12.20.0.0.0are2
R2(configrouter)#netw2.2.2.20.0.0.0are2
R2(configrouter)#netw22.2.2.20.0.0.0are1
R2(configrouter)#netw131.1.23.20.0.0.0are1

OnR3
R3(config)#routerospf1
R3(configrouter)#routerid3.3.3.3

www.ccieuniversity.com

R3(configrouter)#netw131.1.23.30.0.0.0are1
R3(configrouter)#netw3.3.3.30.0.0.0are1
R3(configrouter)#netw131.1.34.30.0.0.0are0
R3(configrouter)#netw33.3.3.30.0.0.0are0

OnR4
R4(config)#routerospf1
R4(configrouter)#routerid4.4.4.4
R4(configrouter)#netw0.0.0.00.0.0.0are0
WhenconfiguringOSPF,alwaysconfiguretherouteridoftherouter,itsmuch
bettertostaticallyconfiguretherouteridasopposetolettingtheOSPFprocessto
chooseonefortherouter.IfweallowtheOSPFprocesstoelectarouteridanda
virtuallinkiscreatedbasedonthatrouterid,letssaylateronaloopbackinterface
iscreatedwithanumericallyhigherIPaddressandtherouterisrebooted,the
routerwillelectthenewloopbackinterfaceasitsrouteridandthevirtuallinkwill
godown.

Task2
EnsurethattheseroutershaveNLRItotheadvertisedinterfacesintheOSPFrouting
domain.

OnR2
R2(config)#routerospf1
R2(configrouter)#area1virtuallink3.3.3.3

OnR3
R3(configif)#routerospf1
R3(configrouter)#area1virtuallink2.2.2.2

Toverifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea

www.ccieuniversity.com

N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
2.0.0.0/32 issubnetted,1subnets
O2.2.2.2[110/65]via131.1.12.2,00:10:31,Serial0/0.12
33.0.0.0/32issubnetted,1subnets
OIA33.3.3.3[110/66]via131.1.12.2,00:10:11,Serial0/0.12
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/66]via131.1.12.2,00:10:31,Serial0/0.12
4.0.0.0/32issubnetted,1subnets
OIA4.4.4.4[110/130]via131.1.12.2,00:10:11,Serial0/0.12
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/65]via131.1.12.2,00:10:32,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:10:33,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:10:14,Serial0/0.12
R1#

Task3
Area2shouldbeconfiguredwithareabasedauthenticationusingCisco12asthe
password.Usethestrongestauthenticationmethod.

OnR1
R1(config)#routerospf1
R1(configrouter)#area2authenticationmessagedigest
R1(configrouter)#intS0/0.12
R1(configsubif)#ipospfmessagedigestkey1md5Cisco12

OnR2
R2(config)#routerospf1
R2(configrouter)#area2authenticationmessagedigest
R2(configrouter)#intS0/0.21

www.ccieuniversity.com

R2(configsubif)#ipospfmessagedigestkey1md5Cisco12

Toverifytheconfiguration:
OnR1
Debugipospfpacket
OSPFpacketdebuggingison
*Mar1101:44:27.847:OSPF:rcv.v:2t:1l:48rid:2.2.2.2
aid:0.0.0.2 chk:0aut:2 keyid:1seq:0x3C8D5AE3fromSerial0/0.12
Aid=areaidis2,Authenticationtypeis2,whichmeansMD5(Type1meanscleartext,
type0meansnoauthentication),andkeyed:1meansthekeynumberusedis1.
ShowipospfinterfaceS0/0.12
Serial0/0.12isup,lineprotocolisup
InternetAddress131.1.12.1/24,Area2
ProcessID1,RouterID1.1.1.1,NetworkTypePOINT_TO_POINT,Cost:64
TransmitDelayis1sec,StatePOINT_TO_POINT,
Timerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5
oobresynctimeout40
Helloduein00:00:07
SupportsLinklocalSignaling(LLS)
Index1/1,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis1
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor2.2.2.2
Suppresshellofor0neighbor(s)
Messagedigestauthenticationenabled
Youngestkeyidis1

Task4
Area0shouldbeconfiguredwithareabasedauthenticationusingCisco0asthe
passwordthisauthenticationshouldonlybeappliedtothelinkthatconnectsR3toR4.
Usethestrongestauthenticationmethod.

OnR4

www.ccieuniversity.com

R4(config)#routerospf1
R4(configrouter)#are0authenticationmessagedigest
R4(configrouter)#intS0/0.43
R4(configsubif)#ipospfmessagedigestkey1md5Cisco0

OnR3
R3(configrouter)#routerospf1
R3(configrouter)#area0authenticationmessagedigest
R3(configrouter)#intS0/0.34
R3(configsubif)#ipospfmessagedigestkey1md5Cisco0

Toverifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
33.0.0.0/32issubnetted,1subnets
O33.3.3.3[110/65]via131.1.34.3,00:01:41,Serial0/0.43
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/65]via131.1.34.3,00:01:41,Serial0/0.43
C4.0.0.0/8isdirectlyconnected,Loopback0
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/66]via131.1.34.3,00:01:41,Serial0/0.43
131.1.0.0/24issubnetted,2subnets
OIA131.1.23.0[110/65]via131.1.34.3,00:01:41,Serial0/0.43
C131.1.34.0isdirectlyconnected,Serial0/0.43
Note,R4isnotgettingnetworksadvertisedinarea0.Whenconfiguringareabased
authentication,allroutersthathaveaninterface(PhysicalorLogical)shouldbe
configuredwiththearea0authenticationmessagedigestcommand,inthiscase
R2hasalogicallinktoarea0,thereforeitmustbeconfiguredasfollows:

www.ccieuniversity.com

OnR2
R2(config)#routerospf1
R2(configrouter)#area0authenticationmessagedigest
Iftheabovecommandisnotconfigured,theroutersinarea2willnothaveallthe
routesintheirroutingtable.

Toverifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/32issubnetted,1subnets
OIA1.1.1.1[110/130]via131.1.34.3,00:04:31,Serial0/0.43
2.0.0.0/32issubnetted,1subnets
OIA2.2.2.2[110/66]via131.1.34.3,00:04:31,Serial0/0.43
33.0.0.0/32issubnetted,1subnets
O33.3.3.3[110/65]via131.1.34.3,00:04:31, Serial0/0.43
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/65]via131.1.34.3,00:04:31, Serial0/0.43
C4.0.0.0/8isdirectlyconnected,Loopback0
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/66]via131.1.34.3,00:04:32,Serial0/0.43
131.1.0.0/24issubnetted,3subnets
OIA131.1.12.0[110/129]via131.1.34.3,00:04:32,Serial0/0.43
OIA131.1.23.0[110/65]via131.1.34.3,00:06:35,Serial0/0.43
C
131.1.34.0isdirectlyconnected,Serial0/0.43
R4#

www.ccieuniversity.com

Task 5
Removetheauthenticationconfigurationfromtasks3and4beforeproceedingtothenext
task.

OnR1
R1(config)#intS0/0.12
R1(configsubif)#noipospfmessagedigestkey1md5Cisco12
R1(configsubif)#routerospf1
R1(configrouter)#noarea2authenticationmessagedigest

OnR2
R2(configsubif)#routerospf1
R2(configrouter)#noarea0authenticationmessagedigest
R2(configrouter)#noarea2authenticationmessagedigest
R2(config)#intS0/0.21
R2(configsubif)#noipospfmessagedigestkey1md5Cisco12

OnR3
R3(config)#intS0/0.34
R3(configsubif)#noipospfmessagedigestkey1md5Cisco0
R3(configsubif)#routerospf1
R3(configrouter)#noarea0authenticationmessagedigest

On R4
R4(config)#intS0/0.43
R4(configsubif)#noipospfmessagedigestkey1md5Cisco0
R4(configsubif)#routerospf1
R4(configrouter)#noarea0authenticationmessagedigest

Toverifytheconfiguration:
OnR1
R1#Showiproute

www.ccieuniversity.com

Codes:C connected,S static,RRIP,M mobile,BBGP


D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectly connected,Loopback0
2.0.0.0/32issubnetted,1subnets
O2.2.2.2[110/65]via131.1.12.2,00:02:41,Serial0/0.12
33.0.0.0/32issubnetted,1subnets
OIA33.3.3.3[110/66]via131.1.12.2,00:02:41,Serial0/0.12
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/66]via131.1.12.2,00:02:41,Serial0/0.12
4.0.0.0/32issubnetted,1subnets
OIA4.4.4.4[110/130]via131.1.12.2,00:00:06,Serial0/0.
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/65]via131.1.12.2,00:02:42,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:02:44,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:02:44,Serial0/0.12
R1#

Task 6
Configureinterfacebasedcleartextauthenticationforalltheroutersinarea2.Use
cisco2asthepassword.

OnR1
R1(configrouter)#intS0/0.12
R1(configsubif)#ipospfauthentication
R1(configsubif)#ipospfauthenticationkeyCisco2

OnR2
R2(configrouter)#intS0/0.21
R2(configsubif)#ipospfauthentication
R2(configsubif)#ipospfauthenticationkeyCisco2

www.ccieuniversity.com

Toverifytheconfiguration:
OnR1
ShowipospfintS0/0.12
Serial0/0.12isup,lineprotocolisup
InternetAddress131.1.12.1/24,Area2
ProcessID1,RouterID1.1.1.1,NetworkTypePOINT_TO_POINT,Cost:64
TransmitDelayis1sec,StatePOINT_TO_POINT,
Timerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5
oobresynctimeout40
Helloduein00:00:07
SupportsLinklocalSignaling(LLS)
Index1/1,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis1
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor2.2.2.2
Suppresshellofor0neighbor(s)
Simplepasswordauthenticationenabled

R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPF interarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
2.0.0.0/32issubnetted,1subnets
O2.2.2.2[110/65]via131.1.12.2,00:02:48,Serial0/0.12
33.0.0.0/32issubnetted,1subnets
OIA33.3.3.3[110/66]via131.1.12.2,00:02:48,Serial0/0.12
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/66]via131.1.12.2,00:02:48,Serial0/0.12
4.0.0.0/32issubnetted,1subnets
OIA4.4.4.4[110/130]via131.1.12.2,00:02:48,Serial0/0.12

www.ccieuniversity.com

22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/65]via131.1.12.2,00:02:50,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:02:53,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:02:53,Serial0/0.12

Task 7
ConfigureperareabasedMD5authenticationforalltheroutersinarea1usingcisco1
asthepassword.

OnR2
R2(config)#routerospf1
R2(configrouter)#area1authenticationmessagedigest
R2(configrouter)#intf0/0
R2(configif)#ipospfmessagedigestkey1md5Cisco1

OnR3
R3(config)#routerospf1
R3(configrouter)#area1authenticationmessagedigest
R3(configrouter)#intf0/0
R3(configif)#ipospfmessagedigestkey1md5Cisco1

Task 8
Area0shouldhavecleartextperinterfacebasedauthenticationusingcisco0asthe
password.DONOTapplyauthenticationonthevirtuallink/s.

OnR4
R4(config)#IntS0/0.43
R4(configsubif)#ipospfauthentication
R4(configsubif)#ipospfauthenticationkeyCisco0

OnR3

www.ccieuniversity.com

R3(config)#IntS0/0.34
R3(configsubif)#ipospfauthentication
R3(configsubif)#ipospfauthenticationkeyCisco0

ToVerifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
2.0.0.0/32issubnetted,1subnets
O2.2.2.2[110/65]via131.1.12.2,00:06:28,Serial0/0.12
33.0.0.0/32issubnetted,1subnets
OIA 33.3.3.3[110/66]via131.1.12.2,00:06:08,Serial0/0.12
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/66]via131.1.12.2,00:06:28,Serial0/0.12
4.0.0.0/32issubnetted,1subnets
OIA4.4.4.4[110/130]via131.1.12.2,00:00:52, Serial0/0.12
22.0.0.0/32issubnetted,1subnets
OIA22.2.2.2[110/65]via131.1.12.2,00:06:29,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:06:30,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:06:10,Serial0/0.12
R1#
Note,thedifferencebetweentheperareabasedauthenticationandperinterface
authenticationisthatinperareabasedauthenticationeventherouterswithlogical
interfaceconnectiontoarea0musthaveauthenticationenabledundertherouter
configurationmode,whereasinperinterfacebasedauthentication,thisisnot
required.

www.ccieuniversity.com

Task 9
R2andR3shouldchangetheirpasswordwithoutanyinterruptiontothelinkusing
ciscoasthepassword.DoNOTremoveanycommandstoaccomplishthistask.

OnR2
R2(config)#intf0/0
R2(configif)#ipospfmessagedigestkey2md5cisco
R2#shipospfintf0/0
FastEthernet0/0isup,lineprotocolisup
InternetAddress131.1.23.2/24,Area1
ProcessID1,RouterID2.2.2.2,NetworkTypeBROADCAST,Cost:1
TransmitDelayis1sec,StateBDR,Priority1
DesignatedRouter(ID)3.3.3.3,Interfaceaddress131.1.23.3
BackupDesignatedrouter(ID)2.2.2.2,Interfaceaddress131.1.23.2
Timerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5
oobresynctimeout40
Helloduein00:00:03
SupportsLinklocalSignaling(LLS)
Index2/4,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis3
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor3.3.3.3(DesignatedRouter)
Suppresshellofor0neighbor(s)
Messagedigestauthentication enabled
Youngestkeyidis2
Rolloverinprogress,1neighbor(s)usingtheoldkey(s):
keyid1
R2#
Noteeventhoughthesecondkey(key2)isonlyconfiguredonR2,R2andR3are
stillauthenticatingbasedonthefirstkey(key1),thisisdisplayedonthelastlineof
theabovedisplay.
Buttherouterknowsthatthesecondkeyisconfigured(Thirdlastlineintheabove
display)anditknowsthattherolloverisinprogress(Secondlastlineofthedisplay)
,buttheotherend(R3)hasnotbeenconfiguredyet.

OnR3
R3#Showiproute

www.ccieuniversity.com

Codes:C connected,S static,RRIP,M mobile,BBGP


D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/32issubnetted,1subnets
OIA1.1.1.1[110/66]via131.1.23.2,00:06:16,FastEthernet0/0
2.0.0.0/32issubnetted,1subnets
OIA2.2.2.2[110/2]via131.1.23.2,00:06:16,FastEthernet0/0
C33.0.0.0/8isdirectlyconnected,Loopback1
C3.0.0.0/8isdirectlyconnected,Loopback0
4.0.0.0/32issubnetted,1subnets
O4.4.4.4[110/65]via131.1.34.4,00:06:16, Serial0/0.34
22.0.0.0/32issubnetted,1subnets
O22.2.2.2[110/2]via131.1.23.2,00:06:17,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
OIA131.1.12.0[110/65]via131.1.23.2,00:06:17,FastEthernet0/0
C131.1.23.0isdirectlyconnected,FastEthernet0/0
C131.1.34.0isdirectly connected,Serial0/0.34
R3#
R3#ShowipospfintF0/0
FastEthernet0/0isup,lineprotocolisup
InternetAddress131.1.23.3/24,Area1
ProcessID1,RouterID3.3.3.3,NetworkTypeBROADCAST,Cost:1
TransmitDelayis1sec,StateDR,Priority1
DesignatedRouter(ID)3.3.3.3,Interfaceaddress131.1.23.3
BackupDesignatedrouter(ID)2.2.2.2,Interfaceaddress131.1.23.2
Timerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5
oobresynctimeout40
Helloduein00:00:09
SupportsLinklocalSignaling(LLS)
Index1/1,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis4
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor2.2.2.2(BackupDesignatedRouter)
Suppresshellofor0neighbor(s)

www.ccieuniversity.com

Messagedigestauthenticationenabled
Youngestkeyidis1
R3#
Note,theauthenticationwithR2isbasedonthefirstkey(key1)
R3(config)#intf0/0
R3(configif)#ipospfmessagedigestkey2md5cisco

Toverifytheconfiguration:
OnR3
R3#ShowipospfintF0/0
FastEthernet0/0isup,lineprotocolisup
InternetAddress131.1.23.3/24,Area1
ProcessID1,RouterID3.3.3.3,NetworkTypeBROADCAST,Cost:1
TransmitDelayis1sec,StateDR,Priority1
DesignatedRouter(ID)3.3.3.3,Interfaceaddress131.1.23.3
BackupDesignatedrouter(ID)2.2.2.2,Interfaceaddress131.1.23.2
Timerintervalsconfigured,Hello10,Dead40,Wait40,Retransmit5
oobresynctimeout40
Helloduein00:00:01
SupportsLinklocalSignaling(LLS)
Index1/1,floodqueuelength0
Next0x0(0)/0x0(0)
Lastfloodscanlengthis1,maximumis4
Lastfloodscantimeis0msec,maximumis0msec
NeighborCountis1,Adjacentneighborcountis1
Adjacentwithneighbor2.2.2.2(BackupDesignatedRouter)
Suppresshellofor0neighbor(s)
Messagedigestauthenticationenabled
Youngestkeyidis2
R3#

Task10
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab3
OSPFCost

R1

R2
.1.2
S0/0

FrameRelay

S0/0
F0/0.2

.3
F0/0
.3

. R3

LabSetup:

ConfigureR2andR3inVlan23
ConfiguretheframerelayconnectionbetweenR1andR2inapointtopoint
manner.

www.ccieuniversity.com

Ipaddressing
Router InterfaceandIPaddress
R1
Lo0=1.1.1.1/8
FramerelayinterfacetoR2=131.1.12.1/24
R2
Lo0=2.2.2.2/8
FramerelayinterfacetoR1=131.1.12.2/24
F0/0interfacetoR3=131.1.23.2/24
R3
Lo0=3.3.3.3/8
F0/0interfacetoR2=131.1.23.3/24

Task1
ConfigureallthreeroutersinOSPFarea0andadvertisetheirdirectlyconnected
networksinthisarea.EnsurethatallroutershaveNLRItoeveryadvertisednetwork.
Ensurethatloopbackinterface/sisadvertisedwiththeircorrectmask.

On R1
R1(config)#routerospf1
R1(configrouter)#netw0.0.0.00.0.0.0are0
R1(configrouter)#intlo0
R1(configif)#ipospfnetpointtopoint
Thistaskisaskingustoensurethattheloopbackinterfacesareadvertisedwith
theircorrectmask,onewaytoaccomplishthistaskistochangetheirnetworktype
topointtopoint.

OnR2
R2(config)#routerospf1
R2(configrouter)#netw0.0.0.00.0.0.0are0
R2(configrouter)#intlo0
R2(configif)#ipospfnetworkpointtopoint

OnR3
R3(config)#routerospf1
R3(configrouter)#netw0.0.0.00.0.0.0are0

www.ccieuniversity.com

R3(configrouter)#intlo0
R3(configif)#ipospfnetworkpointtopoint

Toverifytheconfiguration:
OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
O2.0.0.0/8[110/65]via131.1.12.2,00:00:16,Serial0/0.12
O3.0.0.0/8[110/66]via131.1.12.2,00:00:16,Serial0/0.12
131.1.0.0/24issubnetted,2subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
O131.1.23.0[110/65]via131.1.12.2,00:00:16,Serial0/0.12
R1#

Task 2
ConfigureR1suchthatitadvertisesacostof20foritsloopback0interface.

Youshouldcheckthecostofnetwork1.0.0.0/8thatisadvertisedtoR2byR1.

OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2

www.ccieuniversity.com

iaISISinterarea,* candidatedefault,U peruserstaticroute


o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
O1.0.0.0/8[110/65] via131.1.12.1,00:01:24,Serial0/0.21
C2.0.0.0/8isdirectlyconnected,Loopback0
O3.0.0.0/8[110/2]via131.1.23.3,00:01:24,FastEthernet0/0
131.1.0.0/24issubnetted,2subnets
C131.1.12.0isdirectlyconnected,Serial0/0.21
C131.1.23.0isdirectlyconnected,FastEthernet0/0
R2#
Note,thecostoftheloopbackinterfaceis65thisistheresultofaddingthecostof
theserialinterface(100,000,000/1,544,000=64,remembertodropthedecimal
points)plusthecostoftheloopbackinterface(100,000,000/8000,000,000=1,
rememberthatyoucantusedecimals,therefore,youshouldroundupto1).
Enterthefollowingtochangethecostofthelo0interfaceonR1:

OnR1
R1(configif)#intlo0
R1(configif)#ipospfcost20

Toverifytheconfiguration:
OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
O1.0.0.0/8[110/84]via131.1.12.1,00:00:07,Serial0/0.21
C2.0.0.0/8isdirectlyconnected,Loopback0
O3.0.0.0/8[110/2]via131.1.23.3,00:00:07,FastEthernet0/0
131.1.0.0/24issubnetted,2subnets

www.ccieuniversity.com

C131.1.12.0isdirectlyconnected,Serial0/0.21
C131.1.23.0isdirectlyconnected,FastEthernet0/0
R2#
Note,thecostaftertheconfigurationis84,whichisthesumof64(Thecostofthe
serialinterface)plus20(Whichisthecostofthelo0interface).

Task 3
Inthefutureagigabitinterfacewillbeinstalledononeoftheroutersinthisrouting
domain.Ensurethatthecostsoftheotherinterfacesareadjustedproportionally.

OnAllRouters
(configif)#routerospf1
(configrouter)#autocostreferencebandwidth1000
(config)#End
#Clearipospfproc
ResetALLOSPFprocesses?[no]:y
Bydefault,OSPFcalculatesthecostofaninterfacebydividingthebandwidth ofthe
interfaceinto100million.Usingthedefaultvalue,whenyournetworkhasinterfaces
withabandwidthgreaterthan100millionisnotrecommended,because,OSPFwill
notbeabletodifferentiatebetween100mbpsinterfaceandaninterfacewitha
bandwidththatisgreaterthan100mbps,IPOSPFCOSTcommandenablesyou
tochangetheOSPFcostforaninterface,butabetterwaytoaccomplishthisisto
changethedefaultreferencevalueusedtocalculatetheOSPFcostofaninterface.
Thisvaluecanbemodifiedusingthecommandautocostreferencebandwidth.If
youareplanningtousethiscommand,rememberthateveryrouterintheOSPF
routingdomainmustbeconfiguredaswell.

Task 4
Removethecommandconfiguredintask3.

OnAllRouters
(configif)#routerospf1
(configrouter)#noautocostreferencebandwidth1000
(config)#End

www.ccieuniversity.com

#Clearipospfproc
ResetALLOSPFprocesses?[no]:y

Task 5
ConfiguretherouterssuchthattheFastEthernetinterfaceoftheserouterswillhavea
costof 70.Theotherinterfacesshouldhavetheircostcalculatedproportionally.

OnAllRouters
(configrouter)#routerospf1
(configrouter)#autocostreferencebandwidth7000

TheequationusedbyOSPFisasfollows:
Reference/Bandwidth=Cost
Rearrangingtheformula,wegetthefollowingequation:
Reference=CostXBandwidth=70X100,000,000=7,000,000,000
ReferenceisinunitsofMbps,andbydefaultitssetto100whichmeans100,000,000
bps,nowwehavetodividetheresultby1000,000togettheactualreference,which
is7000.
Sothecostreferenceshouldbechangedto7000

Toverifytheconfiguration:
OnR3
R3#Showipospfintf0/0
FastEthernet0/0isup,lineprotocolisup
InternetAddress131.1.23.3/24,Area0
ProcessID1,RouterID3.3.3.3,NetworkTypeBROADCAST,Cost:70
TransmitDelayis1sec,StateBDR,Priority1
(Therestoftheoutputisomitted)

www.ccieuniversity.com

Task6
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab4
OSPFSummarization

R1

R2
.1.2
S0/0

FrameRelay

S0/0
F0/0.2

.3
F0/0
.3

R4
.4

. R3

FrameRelay

S0/0S0/0

Labsetup:
ConfigureR2F0/0andR3sF0/0inVLAN23
ConfiguretheframerelayconnectionbetweenR1,R2andR3,R4inapointto
pointmanner.

www.ccieuniversity.com

IPAddressing
Router Interface
R1
Lo0
Lo1
Lo2
Lo3
F/Rinterface
R2
Lo0
F/Rinterface
F0/0
R3
Lo0
F/Rinterface
F0/0
R4
Lo0
Lo1
Lo2
Lo3
Lo4
F/Rinterface

IPaddress
1.1.0.1/24
1.1.1.1/24
1.1.2.1/24
1.1.3.1/24
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.0.4/24
4.4.1.4/24
4.4.2.4/24
4.4.3.4/24
4.4.4.4/24
131.1.34.4/24

Area
Area1
Area1
Area1
Area1
Area1
Area0
Area1
Area0
Area0
Area2
Area0
External
External
External
External
Area2
Area2

Task1
Configuretheroutersasfollows:
R4shouldredistributethefourloopbackinterfaces(4.4.0.4/24 4.4.3.4/24)in
theOSPFroutingdomain.
R4shouldadvertiseitsLoopback4andFramerelayinterfaceinArea2.
R1shouldadvertiseallofitsinterfacesinOSPFarea1.
R2shouldadvertiseitsLoopback0,F0/0interfaceinarea0andtheframerelay
interfaceinarea1.
R3shouldadvertiseitsLoopback0,F0/0interfaceinarea0,anditsframerelay
interfaceinarea2.

OnR1
R1(config)#routerospf1
R1(configrouter)#netw0.0.0.00.0.0.0area1

OnR2
R2(config)#routerospf1

www.ccieuniversity.com

R2(configrouter)#netw2.2.2.20.0.0.0are0
R2(configrouter)#netw131.1.23.20.0.0.0are0
R2(configrouter)#netw131.1.12.20.0.0.0are1

OnR3
R3(config)#routerospf1
R3(configrouter)#netw3.3.3.30.0.0.0area0
R3(configrouter)#netw131.1.23.30.0.0.0area0
R3(configrouter)#netw131.1.34.30.0.0.0area2

OnR4
R4(config)#accesslist4permit4.4.0.00.0.3.255
R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr4
R4(configif)#routerospf1
R4(configrouter)#netw4.4.4.40.0.0.0are2
R4(configrouter)#netw131.1.34.40.0.0.0are2
R4(configrouter)#redistributeconnectedsubnetsroutemapTEST
WhenredistributingroutesintoOSPF,thesubnetskeywordwillredistributeallthe
subnetsintoOSPF,ifthiskeywordisomitted,thenonlyclassfulnetworkswillbe
redistributedintoOSPF.

Task2
ConfiguretheOSPFrouterssuchthattheexternalroutesaresummarized.

OnR4
R4(config)#routerospf1
R4(configrouter)#summaryaddress4.4.0.0255.255.252.0
InOSPF,summarizationcanbeconfiguredontwotypesofrouters:ABR/sand/or
ASBRs.
TheinternalOSPFroutescanonlybesummarizedonABRswhereastheexternal
(redistributed)routescanonlybesummarizedonASBRs.
WhensummarizinginternalroutesonABRstheareaxxrangecommandmustbe
used,wherexxistheareaid.
SummarizationonASBRcanbeaccomplishedbyusingthesummaryaddress

www.ccieuniversity.com

command.

Toverifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/32issubnetted,4subnets
OIA1.1.1.1[110/66]via131.1.23.2,00:13:18,FastEthernet0/0
OIA1.1.0.1[110/66]via131.1.23.2,00:13:18,FastEthernet0/0
OIA1.1.3.1[110/66]via131.1.23.2,00:13:18,FastEthernet0/0
OIA1.1.2.1[110/66]via131.1.23.2,00:13:18,FastEthernet0/0
2.0.0.0/32issubnetted,1subnets
O2.2.2.2[110/2]via131.1.23.2,00:13:50,FastEthernet0/0
C3.0.0.0/8isdirectlyconnected,Loopback0
4.0.0.0/8isvariablysubnetted,2subnets,2masks
O4.4.4.4/32[110/65]via131.1.34.4,00:13:19,Serial0/0.34
OE24.4.0.0/22[110/20]via131.1.34.4,00:00:06,Serial0/0.34
131.1.0.0/24issubnetted,3subnets
OIA131.1.12.0[110/65]via131.1.23.2,00:13:19,FastEthernet0/0
C131.1.23.0isdirectlyconnected,FastEthernet0/0
C131.1.34.0isdirectlyconnected,Serial0/0.34
Notetheexternalroutesaresummarized.

Task3
ConfigureArea1suchthatnetworks(1.1.0.0/24,1.1.1.0/24,1.1.2.0/24and1.1.3.0/24)
aresummarizedintotheOSPFroutingdomain.

OnR2

www.ccieuniversity.com

R2(configrouter)#router ospf1
R2(configrouter)#area1range1.1.0.0255.255.252.0
NotetheseroutesareoriginatedbyR1,buttheycanonlybesummarizedbythe
ABR,inthistopologytheABRisR2.Sincetheroutesthatarebeingsummarized
originatedinarea1,thearearangecommandmustspecifytheareaarea1
rangefollowedbythesummarynetworkaddress(1.1.0.0)andthenthesubnet
mask(255.255.252.0).

Task4
TheroutersshouldNOTinstallanull0routeintheroutingtablewhentheysummarize
internalorexternalroutes.

InOSPF,thediscardrouteiscreatedautomaticallywheneverasummaryrouteis
configured,therearetwotypesofsummaryroutes:InternalandExternal.
Wheninternalsummaryroutesareconfigured,OSPFwillinjectaninternaldiscard
route,andwhenanexternalsummaryrouteisconfigured,theOSPFprocesswillcreate
anexternaldiscardroute.Thediscardroutesarecreatedtostopforwardingloops.

OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute

Gatewayoflastresortisnotset

Thisistheinternaldiscardroute

1.0.0.0/8isvariablysubnetted,5subnets,2masks
O
1.1.1.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
O1.1.0.0/22isasummary,00:13:53,Null0
O1.1.0.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
O1.1.3.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
O
1.1.2.1/32[110/65]via131.1.12.1,00:13:53,Serial0/0.21
C
2.0.0.0/8isdirectlyconnected,Loopback0

www.ccieuniversity.com

3.0.0.0/32issubnetted,1subnets
O
3.3.3.3[110/2]via131.1.23.3,00:13:54,FastEthernet0/0
4.0.0.0/8isvariablysubnetted,2subnets,2masks
OIA4.4.4.4/32[110/66]via131.1.23.3,00:13:54,FastEthernet0/0
OE24.4.0.0/22[110/20]via131.1.23.3,00:13:54,FastEthernet0/0
131.1.0.0/24issubnetted,3subnets
C
131.1.12.0isdirectlyconnected,Serial0/0.21
C
131.1.23.0isdirectlyconnected,FastEthernet0/0
OIA131.1.34.0[110/65]via131.1.23.3,00:13:55,FastEthernet0/0

OnR2
R2(config)#routerospf1
R2(configrouter)#nodiscardrouteinternal
Thediscardroutethatwearediscardingistheresultofsummarizingtheinternal
routes,thereforeweneedtospecifyinternal.

ToVerifytheconfiguration:
OnR4
R4(config)#routerospf1
R4(configrouter)#nodiscardrouteexternal
Intheabovecommandwearediscardingtheexternaldiscardroutethatwascreatedas
aresultofsummarizingtheexternalroutes.

Task5
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab5
VirtuallinksandGRETunnels

R1

R2
.1.2
S0/0

FrameRelay

S0/0
F0/0.2

.3
F0/0
.3

R4
.4
FrameRelay

F0/0

S0/0S0/0

F0/0

R5

. R3

www.ccieuniversity.com

LabSetup

UsetheIPaddressingchartbelowtoassignIPaddressestotheinterfaces.
TheframerelayconnectionbetweenR1andR2shouldbeconfiguredinapoint
topointmanner.

R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
TheframerelayconnectionbetweenR3andR4shouldbeconfiguredinapoint
topointmanner.

R4andR5sF0/0interfaceshouldbeconfiguredinVLAN45.

IPAddressing
Router
R1

R2

R3

R4

R5

Interface
Lo0
Lo1
F/Rinterface
Lo0
Lo1
F0/0
F/Rinterface
Lo0
Lo1
F0/0
F/Rinterface
Lo0
Lo1
F0/0
F/Rinterface
Lo0
F0/0

IPaddress
1.1.1.1/24
10.1.1.1/24
131.1.12.1/24
2.2.2.2/24
20.2.2.2/24
131.1.23.2/24
131.1.12.2/24
3.3.3.3/24
30.3.3.3/24
131.1.23.3/24
131.1.34.3/24
4.4.4.4/24
40.4.4.4/24
131.1.45.4/24
131.1.34.4/24
5.5.5.5/24
131.1.45.5/24

www.ccieuniversity.com

Task1
R1sLoopback1interfaceshouldbeadvertisedinarea3anditsFramerelayand
Loopback0interfaceshouldbeadvertisedinarea1
R2sLoopback0anditsframerelayinterfaceshouldbeconfiguredin area1and
itsLoopback1andF0/0interfaceshouldbeconfiguredinarea0
R3sLoopback0andF0/0interfaceshouldbeconfiguredinarea0anditsframe
relayandLoopback1interfaceshouldbeconfiguredinarea2.
R4sframerelayandLoopback0interfaceshouldbeconfiguredinarea2andits
F0/0andLoopback1interfaceshouldbeconfiguredinarea4.
R5sLoopbackandF0/0interfaceshouldbeconfiguredinarea4.

OnR1
R1(configif)#routerospf1
R1(configrouter)#routerid1.1.1.1
R1(configrouter)#netw10.1.1.10.0.0.0are3
R1(configrouter)#netw131.1.12.10.0.0.0are1
R1(configrouter)#netw1.1.1.10.0.0.0are1

OnR2
R2(config)#routerospf1
R2(configrouter)#routerid2.2.2.2
R2(configrouter)#netw131.1.12.20.0.0.0are1
R2(configrouter)#netw2.2.2.20.0.0.0are1
R2(configrouter)#netw131.1.23.20.0.0.0are0
R2(configrouter)#netw20.2.2.20.0.0.0are0

OnR3
R3(configif)#routerospf1
R3(configrouter)#routerid3.3.3.3
R3(configrouter)#netw131.1.23.30.0.0.0are0
R3(configrouter)#netw3.3.3.30.0.0.0are0
R3(configrouter)#netw131.1.34.30.0.0.0are2
R3(configrouter)#netw30.3.3.30.0.0.0are2

www.ccieuniversity.com

OnR4
R4(config)#routerospf1
R4(configrouter)#routerid4.4.4.4
R4(configrouter)#netw131.1.34.40.0.0.0area2
R4(configrouter)#netw4.4.4.40.0.0.0are2
R4(configrouter)#netw131.1.45.40.0.0.0are4
R4(configrouter)#netw40.4.4.40.0.0.0are4

OnR5
R5(config)#routerospf1
R5(configrouter)#routerid5.5.5.5
R5(configrouter)#netw131.1.45.50.0.0.0are4
R5(configrouter)#netw5.5.5.50.0.0.0are4

Task2
Ensurethattheroutesfromarea3arereachablebyR1,R2,R3andR4.DoNOTusea
GRETunneltoaccomplishthistask.

Area3isfragmentedtheotherrouterswontbeabletoseetherouteadvertisedbythis
area(10.1.1.0/24).AvirtuallinkmustbecreatedthatconnectsR1(TheABRofarea3)
toarea0.

OnR1
R1(config)#routerospf1
R1(configrouter)#area1virtuallink2.2.2.2

OnR2
R2(config)#routerospf1
R2(configrouter)#area1virtuallink1.1.1.1

ToVerifytheconfiguration:
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternal type2

www.ccieuniversity.com

E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,1subnets
O1.1.1.0[110/65]via131.1.12.1,00:00:09,Serial0/0.21
2.0.0.0/24issubnetted,1subnets
C2.2.2.0isdirectlyconnected,Loopback0
3.0.0.0/24issubnetted,1subnets
O3.3.3.0[110/2]via131.1.23.3,00:00:09,FastEthernet0/0
4.0.0.0/24issubnetted,1subnets
OIA4.4.4.0[110/66]via131.1.23.3,00:00:09,FastEthernet0/0
20.0.0.0/24issubnetted,1subnets
Notetheroutefromarea3isadvertised
C20.2.2.0isdirectlyconnected,Loopback1
10.0.0.0/24issubnetted,1subnets
OIA10.1.1.0[110/65]via131.1.12.1,00:00:00,Serial0/0.21
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.21
C131.1.23.0isdirectlyconnected,FastEthernet0/0
OIA131.1.34.0[110/65]via131.1.23.3,00:00:02,FastEthernet0/0
30.0.0.0/24issubnetted,1subnets
OIA30.3.3.0[110/2]via131.1.23.3,00:00:02,FastEthernet0/0

Task3
Ensurethatalltheadvertisednetworksarereachablebyalltherouters.UseanyIP
addressinganddoNOTuseaVirtuallinktoaccomplishthistask.

TheroutingtableofR5revealsthatonlynetwork40.4.4.0/24waspropagatedby
R4.Thereasonforthisbehaviorisasfollows:
Area4isfragmentedanddoesnothaveaconnection(LogicalorPhysical)toarea0.
Inordertorectifythisproblemwemustcreateavirtuallink,sincevirtuallinkis
notallowedinthistaskaGREtunnelmustbeused.
TodisplaytheroutingtableofR5beforecreatingaGREtunnel:

OnR5
R5#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP

www.ccieuniversity.com

D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea


N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
5.0.0.0/24issubnetted,1subnets
C5.5.5.0isdirectlyconnected,Loopback0
40.0.0.0/24issubnetted,1subnets
O
40.4.4.0[110/2]via131.1.45.4,00:04:00,FastEthernet0/0
131.1.0.0/24issubnetted,1subnets
C131.1.45.0isdirectlyconnected,FastEthernet0/0

TofixthisproblemwemustcreateaGREtunnelasfollows:

OnR4
R4(configif)#router ospf1
R4(configrouter)#netw200.1.34.40.0.0.0are0
R4(config)#inttu1
R4(configif)#ipaddr200.1.34.4255.255.255.0
R4(configif)#tunnelsource131.1.34.4
R4(configif)#tunneldestination131.1.34.3

OnR3
R3(config)#routerospf1
R3(configrouter)#netw200.1.34.30.0.0.0are0
R3(config)#inttu1
R3(configif)#ipaddr200.1.34.3255.255.255.0
R3(configif)#tunnelsource131.1.34.3
R3(configif)#tunneldestination131.1.34.4

ToVerifytheconfiguration:
OnR5
R5#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP

www.ccieuniversity.com

D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea


N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,1subnets
OIA1.1.1.0[110/11178]via131.1.45.4,00:00:07,FastEthernet0/0
2.0.0.0/24issubnetted,1subnets
OIA2.2.2.0[110/11114]via131.1.45.4,00:00:07,FastEthernet0/0
3.0.0.0/24issubnetted,1subnets
OIA3.3.3.0[110/11113]via131.1.45.4,00:00:07,FastEthernet0/0
4.0.0.0/24issubnetted,1subnets
OIA4.4.4.0[110/2]via131.1.45.4,00:00:47,FastEthernet0/0
OIA200.1.34.0/24[110/11112]via131.1.45.4,00:00:47,FastEthernet0/0
20.0.0.0/24issubnetted,1subnets
OIA20.2.2.0[110/11114]via131.1.45.4,00:00:08,FastEthernet0/0
5.0.0.0/24issubnetted,1subnets
C5.5.5.0isdirectlyconnected,Loopback0
40.0.0.0/24issubnetted,1subnets
O40.4.4.0[110/2]via131.1.45.4,00:00:49,FastEthernet0/0
10.0.0.0/24issubnetted,1subnets
OIA10.1.1.0[110/11178]via131.1.45.4,00:00:09,FastEthernet0/0
131.1.0.0/24issubnetted,4subnets
OIA131.1.12.0[110/11177]via131.1.45.4,00:00:09,FastEthernet0/0
OIA131.1.23.0[110/11113]via131.1.45.4,00:00:09,FastEthernet0/0
OIA131.1.34.0[110/65]via131.1.45.4,00:00:49,FastEthernet0/0
C131.1.45.0isdirectlyconnected,FastEthernet0/0
30.0.0.0/24issubnetted,1subnets
OIA30.3.3.0[110/66]via131.1.45.4,00:00:49,FastEthernet0/0
Notealltheroutesareadvertised.TheIPaddressofthetunnelinterfaceMUSTbe
advertisedinarea0orelsethetunnelwillnotwork.

Task4
Removetheconfigurationfromtheprevioustaskandreplaceitwithvirtuallink.

OnR4
R4(configif)#routerospf1

www.ccieuniversity.com

R4(configrouter)#nonetw200.1.34.40.0.0.0are0
R4(config)#nointtu1
R4(config)#routerospf1
R4(configrouter)#area2virtuallink3.3.3.3

OnR3
R3(config)#routerospf1
R3(configrouter)#nonetw200.1.34.30.0.0.0are0
R3(config)#nointtu1
R3(config)#routerospf1
R3(configrouter)#area2virtuallink4.4.4.4

Task5
Configureasimplecleartextauthenticationforthevirtuallinkthatconnectsarea3to
area0.UseCiscoasthepassword.

OnR1
R1(config)#routerospf1
R1(configrouter)#area1virtuallink2.2.2.2authentication
R1(configrouter)#area1virtuallink2.2.2.2authenticationkeyCisco

OnR2
R2(config)#routerospf1
R2(configrouter)#area1virtuallink1.1.1.1authentication
R2(configrouter)#area1virtuallink1.1.1.1authenticationkeyCisco

Task6
ConfigureMD5authenticationforthevirtuallinkthatconnectsarea4toarea0,use
ciscoasthepassword.

OnR4

www.ccieuniversity.com

R4(config)#routerospf1
R4(configrouter)#area2virtuallink3.3.3.3authenticationmessagedigest
R4(configrouter)#area2virtuallink3.3.3.3messagedigestkey1md5cisco

OnR3
R3(config)#routerospf1
R3(configrouter)#area2virtuallink4.4.4.4authenticationmessagedigest
R3(configrouter)#area2virtuallink4.4.4.4messagedigestkey1md5cisco

Task7
ChangethepasswordfromciscotoCCIEforthevirtuallinkthatconnectsarea4to
area0,withoutinterruptingthelink.

OnR4
R4(config)#routerospf1
R4(configrouter)#area2virtuallink3.3.3.3messagedigestkey2md5CCIE

OnR3
R3(config)#routerospf1
R3(configrouter)#area2virtuallink4.4.4.4messagedigestkey2md5CCIE

Task8
Erasethestartupconfigandreloadtheroutersbeforeproceedingto thenextlab.

www.ccieuniversity.com
Lab6
OSPFStub,TotallyStubby,andNSSAAreas

R1

. R2

S0/0S0/0
S0/0
FrameRelay

F0/0

F0/0

R4

R3

S0/0
S0/0

Frame
Relay

F0/0

F0/0

R5

LabSetup:
R4andR5sF0/0interfaceshouldbeconfiguredinVLAN45.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.
TheframerelayconnectionbetweenR1,R2andR3,R4shouldbeconfiguredina
pointtopointmanner.
UsetheIPaddressingchartbelowtoassignIPaddressestotherouters.

www.ccieuniversity.com

IPAddressing
Router
R1
R2

R3

R4

R5

Interface
Lo0
F/Rinterface
Lo0
Lo1
F0/0interfaceconnectiontoR3
F/RinterfaceconnectiontoR1
Lo0
F0/0interfaceconnectiontoR2
F/RinterfaceconnectiontoR4
Lo0
Lo1
F0/0interfaceconnectiontoR5
F/RinterfaceconnectiontoR3
Lo0
F0/0

IPaddress
1.1.1.1/24
131.1.12.1/24
2.2.2.2/24
22.2.2.2/24
131.1.23.2/24
131.1.12.2/24
3.3.3.3/24
131.1.23.3/24
131.1.34.3/24
4.4.4.4/24
44.4.4.4/24
131.1.45.4/24
131.1.34.4/24
5.5.5.5/24
131.1.45.5/24

Task1
ConfigureOSPFasfollows:
ConfigureR1sLoopback0andFramerelayinterfaceinarea1
ConfigureR2sLoopback0andFramerelayinterfaceinarea1andR2s
Loopback1andF0/0interfaceshouldbeconfiguredinarea0.
ConfigureR3sLoopback0,F0/0,andFramerelayinterfaceinOSPFarea0.
ConfigureR4sLoopback0,andFramerelayinterfacein area0,andits
Loopback1andF0/0inOSPFarea2.
ConfigureR5sLoopback0andF0/0interfaceinOSPFarea2.
Theloopbackinterfacesmustbeadvertisedwiththeircorrectmask.

OnR1
R1(config)#routerospf1
R1(configrouter)#netw1.1.1.10.0.0.0are1

www.ccieuniversity.com

R1(configrouter)#netw131.1.12.10.0.0.0are1
R1(config)#InterfaceLo0
R1(configif)#Ipospfnetworkpointtopoint

OnR2
R2(configif)#routerospf1
R2(configrouter)#netw2.2.2.20.0.0.0area1
R2(configrouter)#netw22.2.2.20.0.0.0are0
R2(configrouter)#netw131.1.12.20.0.0.0are1
R2(configrouter)#netw131.1.23.20.0.0.0are0
R2(config)#InterfaceLo0
R2(configif)#Ipospfnetworkpointtopoint

OnR3
R3(configif)#routerospf1
R3(configrouter)#netw3.3.3.30.0.0.0are0
R3(configrouter)#netw131.1.23.30.0.0.0are0
R3(configrouter)#netw131.1.34.30.0.0.0are0
R3(config)#InterfaceLo0
R3(configif)#Ipospfnetworkpointtopoint

OnR4
R4(configif)#routerospf1
R4(configrouter)#netw4.4.4.40.0.0.0are0
R4(configrouter)#netw131.1.34.40.0.0.0are0
R4(configrouter)#netw44.4.4.40.0.0.0are2
R4(configrouter)#netw131.1.45.40.0.0.0are2
R4(config)#InterfaceLo0
R4(configif)#Ipospfnetworkpointtopoint

OnR5
R5(configif)#routerospf1
R5(configrouter)#netw5.5.5.50.0.0.0are2
R5(configrouter)#netw131.1.45.50.0.0.0are2
R5(config)#InterfaceLo0
R5(configif)#Ipospfnetworkpointtopoint

www.ccieuniversity.com

Task 2
Configurearea1suchthatitdoesnotreceiveLSAtypes4and5.

OnR1
R1(config)#routerospf1
R1(configrouter)#area1stub

OnR2
R2(config)#routerospf1
R2(configrouter)#area1stub
ImportantpointstounderstandaboutaSTUBarea:
ASTUBareacannotbeatransitareaforVirtuallink,butaGREtunnelcan
beusedinstead.
ASTUBareacannothaveanASBR.
ThebackboneareacannotbeconfiguredasaSTUBarea.
EveryrouterandtheABRofthatareashouldhaveareaxxstub
command.
NoLSAtype5(E1,orE2)isallowedinaSTUBarea,buttheroutersinthe
STUBareacanconnecttotheExternalroutesviathedefaultroutethatis
injectedintheareabytheABR.
Bydefault,thecostofthedefaultrouteis1thiscanbeverifiedbyShowip
ospf,andShowiproute.Thecostofthedefaultroutecanbechangedby
areaxxdefaultcostcc,wherexxistheareanumber,andccisthedesired
cost

Task 3
Area2shouldnotreceiveLSAtypes3,4and5.

OnR5
R5(config)#routerospf1
R5(configrouter)#area2stub

www.ccieuniversity.com

Theabovecommandmustbeconfiguredonalltherouterswithinthisarea.

OnR4
R4(config)#routerospf1
R4(configrouter)#area2stubnosummary
TheabovecommandmustonlybeconfiguredontheABRofthisarea.
Noteyoucanreducetheroutingtablefurtherbyconfiguringanareaastotally
stubby.SincealltheIAandE(InterareaandExternal)routesarereachedthrough
theABRandtheABRhasinjecteda0/0routeintothearea,thereisnotreasonto
maintaintheIAroutesandtheyshouldbefiltered.

Task 4
Create/configurethefollowingloopbackinterfacesonR1andredistributetheminto
OSPFroutingdomain:
Lo1=11.1.0.1/24,Lo2=11.1.1.1/24,Lo3=11.1.2.1/24andLo4=11.1.3.1/24
Aftertheredistribution,area1shouldonlyreceiveandpropagateLSAtypes1,2,3and
7.Thisareashouldnothavetheability toconnecttoanyexternalroutesredistributedelse
wherewithinthisroutingdomain.

OnR1
R1(config)#routerospf1
R1(configrouter)#noarea1stub
R1(configrouter)#area1nssa

OnR2
R2(config)#routerospf1
R2(configrouter)#noarea1stub
R2(configrouter)#area1nssa
R1(configif)#intlo1
R1(configif)#ipaddr11.1.0.1255.255.255.0
R1(configif)#intlo2
R1(configif)#ipaddr11.1.1.1255.255.255.0
R1(configif)#intlo3
R1(configif)#ipaddr11.1.2.1255.255.255.0

www.ccieuniversity.com

R1(configif)#intlo4
R1(configif)#ipaddr11.1.3.1255.255.255.0
R1(config)#accesslist1permit11.1.0.00.0.3.255
R1(config)#routemapTESTpermit
R1(configroutemap)#matchipaddr1
R1(config)#routerospf1
R1(configrouter)#redistributeconnectedroutemapTESTsubnets
NotewhenconfiguringanareaasanNSSAarea,bydefaultthe0/0routewillnotbe
injectedbytheABRofthatarea.

Task 5
Create/configurethefollowingloopbackinterfacesonR5andredistributetheminto
OSPFroutingdomain:
Lo1=55.1.0.5/24,Lo2=55.1.1.5/24,Lo3=55.1.2.5/24andLo4=55.1.3.5/24
Aftertheredistribution,theroutersinthisareashouldonlymaintainandpropagateLSA
types1,2,3,7andadefaultroute.

OnR5
R5(config)#intlo1
R5(configif)#ipaddr55.1.0.5255.255.255.0

R5(configif)#intlo2
R5(configif)#ipaddr55.1.1.5255.255.255.0
R5(configif)#intlo3
R5(configif)#ipaddr55.1.2.5255.255.255.0
R5(configif)#intlo4
R5(configif)#ipaddr55.1.3.5255.255.255.0
R5(config)#accesslist1permit55.5.0.00.0.3.255
R5(configif)#routemapTESTpermit10
R5(configroutemap)#matchipaddr1

www.ccieuniversity.com

R5(config)#routerospf1
R5(configrouter)#noarea2stub
R5(configrouter)#area2nssa
R5(configrouter)#redistributeconnectedsubnetsroutemapTEST

OnR4
R4(config)#routerospf1
R4(configrouter)#noarea2stubnosummary
R4(configrouter)#are2nssadefaultinformationoriginate
OSPF:Areaisconfiguredasstubareaalready
Notewhentheareastubnosummarycommandisconfiguredandmustbe
removed,thenoarea2stubnosummarycommandwillonlyremovetheno
summarypartofthecommand.Youmustremembertoenterthenoarea2stub
commandagaintoremovetheentirecommand.
R4(configrouter)#noare2stub
R4(configrouter)#area2nssadefaultinformationoriginate
Notethedefaultinformationoriginatecommandattheendofarea2nssawillinject
adefaultrouteintothearea.

Task 6
Area1shouldbechangedsuchthatitreceivesandpropagatesLSAtypes1,2,7plusa
defaultroute.ThisareashouldNOTmaintainInterarearoutes,butmusthavetheability
toconnecttotheseroutes.

OnR2
R2(config)#routerospf1
R2(configrouter)#area1nssanosummary
ThenosummarykeywordfiltersthesummaryLSAswhicharetheLSAtype3s.

Task 7
Thedefaultroutethatwasinjectedintoarea1shouldhaveacostof50.

www.ccieuniversity.com

OnR2
R2(config)#routerospf1
R2(configrouter)#area1defaultcost50
Bydefault,thecostofthedefaultrouteinjectedintotheareais1thiscanbe
verifiedbyShowiproute.Thecostofthedefaultroutecanbechangedbyarea
xxdefaultcostcc,wherexxistheareanumber,andccisthedesiredcost.

Task 8
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab

www.ccieuniversity.com

Lab7
FilteringroutesinOSPF

R1

R2
.1.2
S0/0

FrameRelay

S0/0
F0/0.2

.3
F0/0
.3

R4
.4

. R3

FrameRelay

S0/0S0/0

Labsetup:
ConfigureR2F0/0andR3sF0/0inVLAN23
ConfiguretheframerelayconnectionbetweenR1,R2andR3,R4inapointto
pointmanner.

www.ccieuniversity.com

IPAddressing
Router Interface
R1
Lo0
Lo1
Lo2
Lo3
F/RinterfacetoR2
R2
Lo0
F/RinterfacetoR1
F0/0interfacetoR3
R3
Lo0
F/RinterfacetoR4
F0/0interfacetoR2
R4
Lo0
Lo1
Lo2
Lo3
Lo4
F/RinterfacetoR3

IPaddress
1.1.0.1/24
1.1.1.1/24
1.1.2.1/24
1.1.3.1/24
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.0.4/24
4.4.1.4/24
4.4.2.4/24
4.4.3.4/24
4.4.4.4/24
131.1.34.4/24

Area
Area1
Area1
Area1
Area1
Area1
Area0
Area1
Area0
Area0
Area2
Area0
Area2
Area2
Area2
Area2
Area2
Area2

Task1
ConfigureOSPFontheroutersaccordingtotheaboveIPaddressingchart.Ensurethat
theadvertisednetworksarereachablebyallrouters.Theloopbackinterfacesshouldbe
advertisedwiththeircorrectmask.

OnR1
R1(config)#routerospf1
R1(configrouter)#routerid1.1.1.1
R1(configrouter)#netw0.0.0.00.0.0.0area1
R1(config)#InterfaceLo0
R1(configif)#Ipospfnetworkpointtopoint
R1(config)#InterfaceLo1
R1(configif)#Ipospfnetworkpointtopoint
R1(config)#InterfaceLo2
R1(configif)#Ipospfnetworkpointtopoint

www.ccieuniversity.com

R1(config)#InterfaceLo3
R1(configif)#Ipospfnetworkpointtopoint

OnR2
R2(config)#routerospf1
R2(configrouter)#routerid2.2.2.2
R2(configrouter)#netw2.2.2.20.0.0.0area0
R2(configrouter)#netw131.1.12.20.0.0.0area1
R2(configrouter)#netw131.1.23.20.0.0.0are 0
R2(config)#InterfaceLo0
R2(configif)#Ipospfnetworkpointtopoint

OnR3
R3(config)#routerospf1
R3(configrouter)#routerid3.3.3.3
R3(configrouter)#netw3.3.3.30.0.0.0area0
R3(configrouter)#netw131.1.34.30.0.0.0area2
R3(configrouter)#netw131.1.23.30.0.0.0area0
R3(config)#InterfaceLo0
R3(configif)#Ipospfnetworkpointtopoint

OnR4
R4(config)#routerospf1
R4(configrouter)#routerid4.4.4.4
R4(configrouter)#netw0.0.0.00.0.0.0area2
R4(config)#InterfaceLo0
R4(configif)#Ipospfnetworkpointtopoint
R4(config)#InterfaceLo1
R4(configif)#Ipospfnetworkpointtopoint
R4(config)#InterfaceLo2
R4(configif)#Ipospfnetworkpointtopoint
R4(config)#InterfaceLo3
R4(configif)#Ipospfnetworkpointtopoint
R4(config)#InterfaceLo4

www.ccieuniversity.com

R4(configif)#Ipospfnetworkpointtopoint

Task2
ConfigureR3suchthattheroutersinarea2dontreceiveanyLSAsfromtheotherareas,
however,theotherareasshouldreceiveroutesfromarea2.DoNOTusedistributelist,
accesslist,oranycommandintherouterospfprocesstoaccomplishthistask.All
networksmustbeadvertised.

OnR3
R3(configrouter)#intS0/0.34
R3(configsubif)#ipospfdatabasefilterallout
BydefaultalloutgoingLSAsarefloodedtotheinterface.Thiscommandprevents
floodingofOSPFLSAsoutofagiveninterface.

Toverifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
4.0.0.0/24issubnetted,5subnets
C4.4.0.0isdirectlyconnected,Loopback0
C4.4.1.0isdirectlyconnected,Loopback1
C4.4.2.0isdirectlyconnected,Loopback2
C4.4.3.0isdirectlyconnected,Loopback3
C4.4.4.0isdirectlyconnected,Loopback4
131.1.0.0/24issubnetted,1subnets
C131.1.34.0isdirectlyconnected,Serial0/0.43
NoteR4doesnothaveanyLSAsinitsroutingtable

www.ccieuniversity.com

OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
C1.1.0.0isdirectlyconnected,Loopback0
C1.1.1.0isdirectlyconnected,Loopback1
C1.1.2.0isdirectlyconnected,Loopback2
C1.1.3.0isdirectlyconnected,Loopback3
2.0.0.0/32issubnetted,1subnets
OIA2.2.2.2[110/65]via131.1.12.2,00:12:15,Serial0/0.12
3.0.0.0/32issubnetted,1subnets
OIA3.3.3.3[110/66]via131.1.12.2,00:02:11,Serial0/0.12
4.0.0.0/32issubnetted,5subnets
OIA4.4.4.4[110/130]via131.1.12.2,00:02:02,Serial0/0.12
OIA4.4.0.4[110/130]via131.1.12.2,00:02:02,Serial0/0.12
OIA4.4.1.4[110/130]via131.1.12.2,00:02:02,Serial0/0.12
OIA4.4.2.4[110/130]via131.1.12.2,00:02:03,Serial0/0.12
OIA4.4.3.4[110/130]via131.1.12.2,00:02:03,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
C131.1.12.0isdirectlyconnected,Serial0/0.12
OIA131.1.23.0[110/65]via131.1.12.2,00:02:08,Serial0/0.12
OIA131.1.34.0[110/129]via131.1.12.2,00:02:13,Serial0/0.12
NoteR1hasalltheLSAsfromR4.

Task3
ConfigureR2suchthatitfiltersalllocallygeneratedLSAsandtheLSAsfromR1
reachingR3andR4.R1andR2shouldreceiveallLSAsfromR3andR4.DoNOTuse
anyglobalconfigcommand/saspartofthesolutiontoaccomplishthistask.

www.ccieuniversity.com

OnR3
R3(configif)#intf0/0
R3(configif)#ipospfnetpointtomultipoint

OnR2
R2(configrouter)#intf0/0
R2(configif)#ipospfnetpointtomultipoint
R2(configif)#routerospf1
R2(configrouter)#neighbor131.1.23.3databasefilterallout
Inorderfortheneighbordatabasefilteralloutcommandtoworkthenetwork
typehastobeconfiguredinapointtomultipointmanner.
Youmayhavetouseclearipospfprocesscommandforthiscommandtotake
effect.

ToVerifytheconfiguration:
OnR3
R3#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
3.0.0.0/24issubnetted,1subnets
C3.3.3.0isdirectlyconnected,Loopback0
4.0.0.0/32issubnetted,5subnets
O4.4.4.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.0.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.1.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.2.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
O4.4.3.4[110/65]via131.1.34.4,00:01:16,Serial0/0.34
131.1.0.0/24issubnetted,2subnets
C131.1.23.0isdirectlyconnected,FastEthernet0/0
C131.1.34.0isdirectlyconnected,Serial0/0.34

www.ccieuniversity.com

NoteR3ONLYhastheLSAsfromR4initsroutingtable.

OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,4subnets
O1.1.0.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
O1.1.1.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
O1.1.2.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
O1.1.3.0[110/65]via131.1.12.1,00:00:32,Serial0/0.21
2.0.0.0/24issubnetted,1subnets
C2.2.2.0isdirectlyconnected,Loopback0
3.0.0.0/32issubnetted,1subnets
O3.3.3.3[110/2]via131.1.23.3,00:00:02,FastEthernet0/0
4.0.0.0/32issubnetted,5subnets
OIA4.4.4.4[110/66]via131.1.23.3,00:00:03,FastEthernet0/0
OIA4.4.0.4[110/66]via131.1.23.3,00:00:03,FastEthernet0/0
OIA4.4.1.4[110/66]via131.1.23.3,00:00:03,FastEthernet0/0
OIA4.4.2.4[110/66]via131.1.23.3,00:00:04,FastEthernet0/0
OIA4.4.3.4[110/66]via131.1.23.3,00:00:04,FastEthernet0/0
131.1.0.0/16isvariablysubnetted,4subnets,2masks
C131.1.12.0/24isdirectlyconnected,Serial0/0.21
C131.1.23.0/24isdirectlyconnected,FastEthernet0/0
O131.1.23.3/32[110/1]via131.1.23.3,00:00:04,FastEthernet0/0
OIA131.1.34.0/24[110/65]via131.1.23.3,00:00:04,FastEthernet0/0
NoteR2canseealltheLSAs.

Task4
Removealltheconfigurationcommandsfromtheprevioustwosteps.

www.ccieuniversity.com

OnR3
R3(config)#intS0/0.34
R3(configsubif)#noipospfdatabasefilterallout
R3(configif)#intf0/0
R3(configif)#noipospfnetpointtomultipoint

OnR2
R2(configrouter)#intf0/0
R2(configif)#noipospfnetpointtomultipoint
R2(configif)#routerospf1
R2(configrouter)#noneighbor131.1.23.3databasefilterallout

Task5
ConfigureR3orR4suchthatR4doesnothavereachabilitytoNetwork3.0.0.0.You
mustusedistributelisttoaccomplishthistask.

OnR4
R4(config)#accesslist3deny3.0.0.00.255.255.255
R4(config)#accesslist3permitany
R4(config)#routerospf1
R4(configrouter)#distributelist3inS0/0.43
NotesincedistributelistoutdoesNOTworkinOSPF,theconfigurationofthis
taskmustbeperformedonR4usingthedistributelistincommand.

Task6
OnR4stopadvertisingnetworks4.4.0.0/24 4.4.3.0/24andredistributethesenetworks
intoOSPF.Ensurethatotherroutersseetheroutes asexternal.

OnR4
R4(config)#accesslist4permit4.4.0.00.0.3.255

www.ccieuniversity.com

R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr4
R4(config)#routerospf1
R4(configrouter)#nonetw0.0.0.00.0.0.0are2
R4(configrouter)#netw131.1.34.40.0.0.0area2
R4(configrouter)#redistributeconnectedsubnetsroutemapTEST

Task7
ConfiguretheOSPFrouterssuchthattheydonthavereachabilitytonetwork4.4.3.0/24.
DoNOTuseanyglobalconfigcommand,neighborcommand,interfaceconfig
command,oranyipospfcommandtoaccomplishthistask.

OnR4
R4(configsubif)#routerospf1
R4(configrouter)#summaryaddress4.4.3.0255.255.255.0notadvertise
NotethiscommandwasusedtosummarizetheexternalroutesintoOSPF
routingdomain.Thiscommandcanalsobeusedtofilteranexternalnetwork/s
whenconfiguredonASBR/s. Thiscommandcannotbeusedtofilterinternal
networks.

Task8
ConfiguretheOSPFrouterssuchthatR3andR4donthavereachabilityto1.1.3.0/24
network.

On R2
R2(config)#routerospf1
R2(configrouter)#area1range1.1.3.0255.255.255.0notadvertise
Notethiscommandwasusedtosummarizetheinternalroutesfromoneareainto
anotherareawithinanOSPFroutingdomain.Thiscommandcanalsobeusedto
filterinternalrouteswithinanOSPFroutingdomainandcanonlybeusedonthe
ABR/s.ThiscommandcanNOTbeusedtofilterexternalnetworks.

www.ccieuniversity.com

Task9
Removetheconfigurationcommandsfromthepreviousstep.

OnR2
R2(config)#routerospf1
R2(configrouter)#noarea1range1.1.3.0255.255.255.0notadvertise

Task10
ConfigureR3suchthatnetwork1.1.1.0/24isnotadvertisedtoarea2.

OnR3
R3(config)#ipprefixlistTESTseq5deny1.1.1.0/24
R3(config)#ipprefixlistTESTseq10permit0.0.0.0/0le32
R3(config)#routerospf1
R3(configrouter)#area2filterlistprefixTESTin
ThiscommandfiltersprefixesadvertisedinLSAtype3betweenOSPFareaofan
ABR.

ToVerifytheconfiguration:
OnR4
R4#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
1.0.0.0/24issubnetted,3subnets
OIA1.1.0.0[110/130]via131.1.34.3,00:01:20,Serial0/0.43

www.ccieuniversity.com

OIA1.1.2.0[110/130]via131.1.34.3,00:01:10,Serial0/0.43
OIA1.1.3.0[110/130]via131.1.34.3,00:01:10,Serial0/0.43
2.0.0.0/32issubnetted,1subnets
OIA 2.2.2.2[110/66]via131.1.34.3,00:11:38,Serial0/0.43
4.0.0.0/24issubnetted,5subnets
C4.4.0.0isdirectlyconnected,Loopback0
C4.4.1.0isdirectlyconnected,Loopback1
C4.4.2.0isdirectlyconnected,Loopback2
C4.4.3.0isdirectlyconnected,Loopback3
C4.4.4.0isdirectlyconnected,Loopback4
131.1.0.0/24issubnetted,3subnets
OIA131.1.12.0[110/129]via131.1.34.3,00:11:42,Serial0/0.43
OIA131.1.23.0[110/65]via131.1.34.3,00:11:42,Serial0/0.43
C131.1.34.0isdirectlyconnected,Serial0/0.43
NoteNetwork1.1.1.0/24isnotintheroutingtableofR4.IftheroutingtableofR3
isdisplayed,youwillseenetwork1.1.1.0/24intheroutingtable.RememberthatR3
isanABRanditconnectsarea0toarea2.

Task11
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab8
RedirectingtrafficinOSPF

R1

S0/0

FrameRelay

R3
R2

S0/0S0/0

F0/0

F0/0

F0/0
.

R4

LabSetup:
R1shouldbeconfiguredwithtwopointtopointlinks,oneconnectingR1toR2
andtheotherconnectingR1toR3.R2andR3shouldalsobeconfiguredina
pointtopointmanner.
R2,R3andR4sF0/0interfacesshouldbeconfiguredtobeinVLAN234.
UsetheIPaddresschartbelowtoassignIPaddressestotherouters.

www.ccieuniversity.com

IPAddressing
Router Interface
R1
Lo0
F/RinterfacetoR2
F/RinterfacetoR3
R2
Lo0
F/RinterfacetoR1
F0/0interface
R3
Lo0
F/RinterfacetoR1
F0/0interface
R4
Lo0
F0/0interface

IPaddress
1.1.1.1/8
131.1.12.1/24
131.1.13.1/24
2.2.2.2/8
131.1.12.2/24
131.1.234.2/24
3.3.3.3/8
131.1.13.3/24
131.1.234.3/24
4.4.4.4/8
131.1.234.4/24

Area
Area0
Area0
Area0
Area0
Area0
Area0
Area0
Area0
Area0
Area0
Area0

Task1
ConfigureOSPFonallroutersandadvertisetheirdirectlyconnectednetworkinarea0
andensurethattheserouterscanreachalltheadvertisednetworks.Ensurethatthe
loopbackinterfacesareadvertisedwiththeircorrectmask.

OnAllRouters
(configif)#routerospf1
(configrouter)#netw0.0.0.00.0.0.0are0
(configrouter)#interfaceLo0
(configif)#ipospfnetworkpointtopoint

Task2
R1hastwowaystoreachnetwork4.0.0.0/8,ensurethatR1usesR2toreachthis
network.R1shouldgodirectlytoR3toreachnetwork3.0.0.0.
However,ifR2goesdown,R3shouldbeusedasatransitroutertoreachnetwork4.0.0.0
/8.
DONOTUSETHEFOLLOWINGCOMMANDS:
Bandwidth,anyglobalconfigcommand,OSPFcostcommandorthedistance
command.

www.ccieuniversity.com

NotetheroutingtableofR1revealsthatR1canreachnetwork4.0.0.0viaR2and
R3.

OnR1
R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
O2.0.0.0/8[110/65]via131.1.12.2,00:00:21,Serial0/0.12
O3.0.0.0/8[110/65]via131.1.13.3,00:00:21,Serial0/0.13
O4.0.0.0/8[110/66]via131.1.13.3,00:00:21,Serial0/0.13
[110/66]via131.1.12.2,00:00:21,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
O
131.1.234.0[110/65]via131.1.13.3,00:00:21,Serial0/0.13
[110/65]via131.1.12.2,00:00:21, Serial0/0.12
C131.1.12.0isdirectlyconnected,Serial0/0.12
C131.1.13.0isdirectlyconnected,Serial0/0.13

OnR3
R3(config)#routerospf1
R3(configrouter)#maxmetricrouterlsa
TheabovecommandwillcausearoutertooriginateLSAswithamaximummetric
of0xffff(LSInfinity).Thisisdonesothatotherroutersdonotprefertherouterasa
transithopintheirpath toagivennetwork.

ToVerifytheconfiguration:
OnR1
Showiproute

www.ccieuniversity.com

Codes:C connected,S static,RRIP,M mobile,BBGP


D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
O2.0.0.0/8[110/65]via131.1.12.2,00:04:12,Serial0/0.12
O3.0.0.0/8[110/65]via131.1.13.3,00:04:12,Serial0/0.13
O4.0.0.0/8[110/66]via131.1.12.2,00:04:12,Serial0/0.12
131.1.0.0/24issubnetted,3subnets
O131.1.234.0[110/65]via131.1.12.2,00:04:12,Serial0/0.12
C131.1.12.0isdirectlyconnected,Serial0/0.12
C131.1.13.0isdirectlyconnected,Serial0/0.13

Task3
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab9
LimitingthenumberofOSPFredistributed
routes

R1

R2
FrameRelay
S0/0S0/0

F0/0

R3 F0/0

LabSetup:
TheframerelayconnectionbetweenR1andR2mustbeconfiguredinapointto
pointmanner.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.

www.ccieuniversity.com

IPAddressing
Router Interface
R1
Lo1
Lo2
Lo3
Lo4
Lo5
Lo6
Lo7
Lo8
Lo9
Lo10
Lo11
F/RinterfacetoR2
R2
Lo0
Lo1
F/RinterfacetoR1
F0/0interfacetoR3
R3
Lo0
F/RinterfacetoR2

IPaddress
1.0.0.1/8
2.0.0.1/8
3.0.0.1/8
4.0.0.1/8
5.0.0.1/8
6.0.0.1/8
7.0.0.1/8
8.0.0.1/8
9.0.0.1/8
10.0.0.1/8
11.0.0.1/8
131.1.12.1/24
2.2.2.2/8
22.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.23.3/24

Area
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
Eigrp100
OSPFarea0
Eigrp100
OSPFarea0
OSPFarea0
OSPFarea0

Task1
Configuretheroutersasfollows:
OnR1,configureEigrp100andadvertisenetworks1.0.0.0/8 5.0.0.0/8and
theframerelayinterfacetoR2.
OnR2,configureEigrp100andadvertisenetworks2.0.0.0/8andtheframe
relayinterfacelinktoR1.
OnR2,configureOSPFandadvertisenetwork22.0.0.0/8andtheF0/0interface
toR3inarea0.
OnR3,configureOSPFandadvertiseallofitsinterfacesinarea0.

OnR1
R1(config)#routereigrp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw2.0.0.0

www.ccieuniversity.com

R1(configrouter)#netw3.0.0.0
R1(configrouter)#netw4.0.0.0
R1(configrouter)#netw5.0.0.0
R1(configrouter)#netw131.1.12.00.0.0.255

OnR2
R2(configif)#routerospf1
R2(configrouter)#netw22.2.2.20.0.0.0are0
R2(configrouter)#netw131.1.23.20.0.0.0are0
R2(configrouter)#routereigrp100
R2(configrouter)#netw131.1.12.00.0.0.255
R2(configrouter)#netw2.0.0.0
R2(configrouter)#passiveinterfaceF0/0
R2(configrouter)#PassiveinterfaceLo1

OnR3
R2(configif)#routerospf1
R2(configrouter)#netw0.0.0.00.0.0.0are0

Task2
OnR2,performamutualredistributionbetweenOSPFandEigrp100.

OnR2
R2(config)#routereigrp100
R2(configrouter)#redistributeospf1metric15002000025511500
R2(configrouter)#routerospf1
R2(configrouter)#redistributeeigrp100subnets
NotewhenredistributingroutesintoOSPF,theywillberedistributedwithametric
of20.

Toverifytheconfiguration:
Showiproute

www.ccieuniversity.com

Codes:C connected,S static,RRIP,M mobile,BBGP


D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
OE21.0.0.0/8[110/20]via131.1.23.2,00:01:18,FastEthernet0/0
OE22.0.0.0/8[110/20]via131.1.23.2,00:01:18,FastEthernet0/0
C3.0.0.0/8isdirectlyconnected,Loopback0
OE24.0.0.0/8[110/20]via131.1.23.2,00:01:18,FastEthernet0/0
OE25.0.0.0/8[110/20]via131.1.23.2,00:01:18, FastEthernet0/0
22.0.0.0/32issubnetted,1subnets
O22.2.2.2[110/2]via131.1.23.2,00:01:18,FastEthernet0/0
131.1.0.0/24issubnetted,2subnets
OE2131.1.12.0[110/20]via131.1.23.2,00:01:20,FastEthernet0/0
C131.1.23.0isdirectlyconnected,FastEthernet0/0

Task3
R2shouldbeconfiguredsuchthatthemaximumnumberofprefixesthatcanbe
redistributedintoOSPFroutingprotocolis10.
R2shouldgeneratetwowarningmessages.Thefirstmessageshouldoccurwhenthe
numberofredistributedprefixesreaches70%oftheconfiguredthreshold(10).The
secondmessageshouldoccurwhenthe10th prefixisredistributed.

OnR2
R2(configrouter)#routerospf1
R2(configrouter)#redistributemaximumprefix1070warningonly
Theabovecommandlimitsthenumberofprefixesthatcanberedistributedinto
OSPFroutingdomain.Inthiscase,therouterwillgeneratetwowarningmessages,
thefirstonewillbegeneratedwhen70%oftheconfiguredthreshold(10)isreached
andthe secondmessagewillbegeneratedwhentheconfiguredthreshold(10)is
exceeded.
Theinitialconfigfilehascreated11Loopbackinterfacesfortestingpurpose.Test
thispolicybyadvertisingtheseloopbackinterfacesoneatatimeandobservethe
warningmessages.

www.ccieuniversity.com

Task4
TheadministratorofR1isconstantlyviolatingthemaximumroutespolicy,inorderto
safeguardagainstthis,youshouldconfigureR2suchthatonly10prefixesareallowedto
beredistributedintoOSPF,ifR1advertisesmorethan10prefixesinEigrp100,R2
shouldignoretheextraprefixes.

OnR2
R2(config)#routerospf1
R2(configrouter)#noredistributemaximumprefix1070warningonly
R2(configrouter)#redistributemaximumprefix1070
Sincethewarningonlykeywordisnotused,R2willignoreanyadvertisement
abovethesetthreshold.

Task5
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab1
AuthenticationandAdvancedConfiguration

R1

R2
.1.2
S0/0

FrameRelay

AS100

S0/0
AS200

LabSetup
R1andR2shouldbeconfiguredinaframerelaypointtopoint.

IPAddressing
Router
R1
R2

Interface
Lo0
S0/0.12
Lo0
S0/0.21

IPaddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24

Task1
ConfigureanEBGPneighboradjacencybetweenthetworoutersandonlyadvertisetheir
LoopbackinterfaceinBGP.

OnR1
R1(config)#router bgp100

www.ccieuniversity.com

R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#network1.0.0.0
R1(configrouter)#noautosummary

OnR2
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#network2.0.0.0
R2(configrouter)#noautosummary
NoteeventhoughBGPisaclasslessroutingprotocol,ithasaclassfulnature,
becausebydefaultitsummarizesnetworkstotheirclassfulboundary.RIPv2and
Eigrphavethesamebehaviorandthisbehaviorcanbedisabledbyusingtheno
autosummarycommand.

Toverifytheconfiguration:
OnR1
Showipbgp
BGPtableversionis3,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf Weight
*>1.0.0.00.0.0.0
0
32768
*>2.0.0.0131.1.12.2
0
0

Path
i
200i

www.ccieuniversity.com

ValidTableEntry.
ThebestentryforthePrefix.
Theentryissuppressed.
TheentrywaslearnedviaanIBGP,thisistheItotheleftofthe
networkcolumn.TheletterIunderthepathcolumn,specifiestheto
originoftheroute.
Historystate,meaningthattheroutehasaccruedsomepenaltybutnot
H
enoughfortheroutetobeDampened.
Network Prefixentryforthenetwork,ifthemaskisomitted,thedefaultmaskis
assumed.
NextHop ThenexthopsIPaddresstogettothespecifiednetworkaddress,ifitis
0.0.0.0itisaprefixthatisadvertisedbythelocalrouter.
ThisistheInterasmetric,ortheMEDattribute.
Metric
Thisisthelocalpreferenceattribute.
LocPrf
Theprefixesthatarereceivedviaaneighborwillhaveaweightof0,but
Weight
theprefixesthatareoriginatedbythelocalrouterwillhaveaweightvalue
of32768.
IftheprefixeswereoriginatedorlearnedviaanIBGP,thepathcolumn
Path
willhavetheletterIwithoutanyASNs.If theprefix waslearnedthrough
anotherAS,thenthiscolumnwillhavetheASnumber/sfollowedbythe
letterI,theASNsindicatetheASesthataprefixhastraversed.
*
>
S
I

R1#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
C1.0.0.0/8isdirectlyconnected,Loopback0
B2.0.0.0/8[20/0]via131.1.12.2,00:02:31
131.1.0.0/24issubnetted,1subnets
C
131.1.12.0isdirectlyconnected,Serial0/0.12

Task2
OnR2,restrictthenumberofprefixesreceivedfromR1to10R2shouldgeneratea
messageif70%ofthisthresholdisreached,ifR1advertisesmorethan10prefixes,R2
shouldterminatetheneighboradjacency.

www.ccieuniversity.com

OnR2
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1maximumprefix1070
Tolimitthenumberofprefixesfromagivenneighbor,usetheneighbor
maximumprefixcommandintherouterconfigmode.
Neighbor131.1.12.1maximumprefix1070
Maximumprefix10specifiesthemaximumnumberofprefixes(inthiscase
10)thatthelocalrouterisallowedtoreceivefromthespecifiedneighbor
(131.1.12.1).
Thenextvalue(70)aftertheNeighbor131.1.12.1maximumprefix10
commandspecifies,atwhatpercentageofthemaximumprefixlimitthe
routerstartstogenerateawarningmessage.Therangeis1100.
RestartOptionalkeywordthatcanbeconfiguredtotelltherouterto
automaticallyreestablishapeeringsessionthathasbeendisabledbecause
themaximumprefixlimithasbeenexceeded.Ifthiskeywordisnot
configured,adisabledsessionwillstaydown.Iftherestartkeywordis
configured,itmustbefollowedwithatimerestartinterval.Timeinterval
valueisinminutesthatapeeringsessionisreestablished.Therangeis1
65535.
WarningonlyThismessagetellsthelocalroutertogeneratealogmessage
whenthemaximumprefixlimitisexceeded.Ifthiskeywordisomitted,the
peersessionwillbeterminated.

Task3
ConfigurethefollowingEthernetlinkbetweentheroutersandassigntheIPaddressing
specifiedinthediagram:

www.ccieuniversity.com

AS100

AS200

R1

R2
.1.2
S0/0

FrameRelay

F0/0.1

S0/0
F0/0.2

200.1.1.0/24

R1F0/0IPaddress=200.1.1.1/24andR2sF0/0IPaddress=200.1.1.2/24
R1andR2sF0/0interfacemustbeconfiguredinVLAN12.
Donotadvertisenetworks1.0.0.0and2.0.0.0inBGP
AdvertisetheLoopbackinterfaces(1.0.0.0/8and2.0.0.0/8)andthelinks
betweentheroutersinRIPv2.

Cat1
Switch(config)#intrangeF0/12
Switch(configifrange)#swimodeacc
Switch(configifrange)#swiaccv12

OnR1
R1(configrouter)#intf0/0
R1(configif)#ipaddress200.1.1.1255.255.255.0
R1(configif)#noshut

OnR2
R2(configrouter)#intf0/0
R2(configif)#ipaddr200.1.1.2255.255.255.0
R2(configif)#noshut

www.ccieuniversity.com

Task4
ConfigurethefollowingLoopbackinterfacesonR1andR2andensurethatthese
loopbackinterfacesaretheonlyonesadvertisedinBGP:
R1Lo1=11.1.1.1/8andR2Lo1=22.2.2.2/8
Toensurethatthisneighboradjacencyisnotterminatedbecauseofaframerelaylink
failure,theEthernetlinkwasaddedandshouldbeusedwithoutanyinterruptiontothe
neighboradjacency.

OnR1
R1(configif)#routerbgp100
R1(configrouter)#noneighbor131.1.12.2remoteas200
R1(configrouter)#neighbor2.2.2.2remoteas200
R1(configrouter)#neighbor2.2.2.2updatesourcelo0
R1(configrouter)#neighbor2.2.2.2ebgpmultihop2
R1(configrouter)#nonetw1.0.0.0
R1(configrouter)#netw11.0.0.0
R1(config)#routerrip
R1(configrouter)#ver2
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw131.1.12.0
R1(configrouter)#netw200.1.1.0

OnR2
R2(configif)#routerbgp200
R2(configrouter)#noneighbor131.1.12.1remoteas100
R2(configrouter)#neighbor1.1.1.1remoteas100
R2(configrouter)#neighbor1.1.1.1updatesourcelo0
R2(configrouter)#network22.0.0.0
BydefaultBGPusesthebestlocalIPaddressforitsTCPconnection.ThesourceIP
addressoftheupdatesissettotheIPaddressofthebestlocalinterface.Usethe
neighborupdatesourcecommandtochangethisbehavior.
R2(configrouter)#neighbor1.1.1.1ebgpmultihop2
BydefaultBGPestablishesapeersessionwithneighborsthataredirectlyconnected
andbecauseofthispolicy,theTTLofthesepacketsissetto1.Tochangethis
behaviortheneighborebgpmultihopcommandcanbeused,thiscommand
changestheTTLofthepackets.IftheTTLvalueisnotspecifiedaTTLof255is
added.

www.ccieuniversity.com

R2(configrouter)#nonetw2.0.0.0
R2(config)#routerrip
R2(configrouter)#netw2.0.0.0
R2(configrouter)#ver2
R2(configrouter)#netw131.1.12.0
R2(configrouter)#netw200.1.1.0

Task5
EnsurethattheroutersusetheirexistingLoopback0interfaceastheirrouterID.

OnR1
R1(config)#routerbgp100
R1(configrouter)#bgprouterid1.1.1.1

OnR2
R2(config)#routerbgp200
R2(configrouter)#bgprouterid2.2.2.2

Task6
EnsurethattheseroutersauthenticateeachotherbeforeexchangingBGPupdates.They
shoulduseciscoasthepasswordforthisauthentication.

OnR1
R1(config)#routerbgp100
R1(configrouter)#neighbor2.2.2.2passwordcisco

OnR2
R2(config)#routerbgp200
R2(configrouter)#neighbor1.1.1.1passwordcisco
Task7
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com
Lab2
ConditionalandBackdoorAdvertisement

R2

R3
F0/0F0/0

S0/0

S0/0

Frame
Relay

S0/0

R1
LabSetup:
ConfigureR1tohavetwopointtopointframerelayconnections,oneconnecting
R1toR2,andtheotherconnectingR1toR3.
R2andR3shouldeachbeconfiguredwithasinglepointtopointconnectionto
R1.
ConfigureR2andR3sF0/0interfacetobeinVLAN23.

www.ccieuniversity.com

Ipaddressing:
Router
R1

R2

R3

Interface
Lo0
FramerelayconnectiontoR2
FramerelayconnectiontoR3
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR2

IPAddress
1.1.1.1 /8
131.1.12.1/24
131.1.13.1/24
2.2.2.2/8
131.1.12.2/24
150.1.0.2/24
3.3.3.3/8
150.1.2.3/24
131.1.13.3/24
150.1.0.3/24

Task1
ConfigureEBGPpeersessionsasfollows:

R1tohaveapeersessiontoR2
R1tohaveapeersessiontoR3
R2tohaveapeersessiontoR1
R3tohaveapeersessiontoR1

OnR1
R1(config)#routerbgp100
R1(configrouter)#noauto
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#neighbor131.1.13.3remoteas300

OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.12.1remoteas100

OnR3
R3(configif)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#neighbor131.1.13.1remoteas100

ASnumber
100

200

300

www.ccieuniversity.com

Task2
R1shouldadvertiseitsLoopback0,itsframerelayconnectiontoR2andR3in
BGP
R2shouldadvertiseitsLoopback0inBGP.
R3shouldadvertiseitsLo0andLo1inBGPusingthecorrectmask.

OnR1
R1(configrouter)#routerbgp100
R1(configrouter)#network1.0.0.0
R1(configrouter)#network131.1.12.0mask255.255.255.0
R1(configrouter)#network131.1.13.0mask255.255.255.0

OnR2
R2(configrouter)#network2.0.0.0

OnR3
R3(config)#routerbgp300
R3(configrouter)#network3.0.0.0
R3(configrouter)#network150.1.2.0mask255.255.255.0

Task3
ConfigureEIGRPAS#100onthefollowingrouters:
R2andR3shouldadvertisenetwork150.1.0.0inEigrpAS#100
Theabovetworoutersshouldadvertise150.1.0.0networkasfollows,ensurethat
autosummarizationisenabled:
Routereigrp100
Network150.1.0.0
Autosum

OnR2andR3
R2(config)#routereigrp100
R2(configrouter)#netw150.1.0.0
R2(configrouter)#autosummary

www.ccieuniversity.com

Task4
NoteR2takesthescenic(R2toR1toR3)routetoreachnetwork150.1.2.0/24,ensure
thatR2reachesnetwork150.1.2.0/24throughitsF0/0interface.DoNOTusePolicy
BasedRoutingyoushoulduseaBGPsolutiontothisproblem.

AshowiproutecommandwillrevealtheroutingtableofR2asfollows:

OnR2
Showiprout
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
B1.0.0.0/8[20/0]via131.1.12.1,00:20:51
C2.0.0.0/8isdirectlyconnected,Loopback0
B3.0.0.0/8[20/0]via131.1.12.1,00:20:51
131.1.0.0/24issubnetted,2subnets
C131.1.12.0isdirectlyconnected,Serial0/0.21
B131.1.13.0[20/0]via131.1.12.1,00:04:02
150.1.0.0/24issubnetted,2subnets
B150.1.2.0[20/0]via131.1.12.1,00:03:32
C150.1.0.0isdirectlyconnected,FastEthernet0/0
NoteR2goesthroughR1andthenR3toreachnetwork150.1.2.0/24
ATraceroutecommandwillshowthecompletepathto150.1.2.3:
Traceroute150.1.2.3
Typeescapesequencetoabort.
Tracingtherouteto150.1.2.3
1131.1.12.128msec28msec32msec
2131.1.13.3[AS100]56msec*56msec

www.ccieuniversity.com

Tocorrectthisproblem:

OnR2
R2(config)#routerbgp200
R2(configrouter)#network150.1.2.0mask255.255.255.0backdoor
NoteR2receivesroutinginformationfornetwork150.1.2.0/24fromtwosources,BGPand
Eigrp.R2willaccepttheroutinginformationfromBGPbecauseithasalower
administrativedistance(20versus90).NetworkbackdoorisaBGPsolutiontothis
situation,BGPbackdoorassignsanadministrativedistanceof200totheadvertised
network,inthiscase150.1.2.0/24.AfterenteringtheBGPbackdoorcommand,R2will
acceptEigrpsadvertisement,becauseEigrpwillhavealoweradministrativedistance(90
versus200).

OnR2
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
B1.0.0.0/8[20/0]via131.1.12.1,00:38:26
C2.0.0.0/8isdirectlyconnected,Loopback0
B3.0.0.0/8[20/0]via131.1.12.1,00:38:26
131.1.0.0/24issubnetted,2subnets
C131.1.12.0isdirectlyconnected,Serial0/0.21
B131.1.13.0[20/0]via131.1.12.1,00:21:37
150.1.0.0/24issubnetted,2subnets
D150.1.2.0[90/156160]via150.1.0.3,00:00:08,FastEthernet0/0
C150.1.0.0isdirectlyconnected,FastEthernet0/0
ATracerouterevealsthepath:
Traceroute150.1.2.3
Typeescapesequencetoabort.

www.ccieuniversity.com

Tracingtherouteto150.1.2.3
1150.1.0.34msec*0msec
Toactuallyseethenewlyassignedadministrativedistance:

OnR2
R2(config)#Routereigrp100
R2(configrouter)#Nonetwork150.1.0.0
R2#Showiproute
Codes:C connected,S static,RRIP,M mobile,BBGP
D EIGRP,EX EIGRPexternal,OOSPF,IA OSPFinterarea
N1 OSPFNSSAexternaltype1,N2 OSPFNSSAexternaltype2
E1 OSPFexternaltype1,E2 OSPFexternaltype2
i ISIS,su ISISsummary,L1ISISlevel1,L2 ISISlevel2
iaISISinterarea,* candidatedefault,U peruserstaticroute
o ODR,P periodicdownloadedstaticroute
Gatewayoflastresortisnotset
B1.0.0.0/8[20/0]via131.1.12.1,00:41:10
C2.0.0.0/8isdirectlyconnected,Loopback0
B3.0.0.0/8[20/0]via131.1.12.1,00:41:10
Noteanadministrativedistanceof200is
131.1.0.0/24issubnetted,2subnets
assignedtonetwork150.1.2.0
C131.1.12.0isdirectlyconnected,Serial0/0.21
B131.1.13.0[20/0]via131.1.12.1,00:24:21
150.1.0.0/24issubnetted,2subnets
B150.1.2.0[200/0]via131.1.12.1,00:00:04
C150.1.0.0isdirectlyconnected,FastEthernet0/0

Task5
Removethefollowingfromtheroutersbeforeproceedingtothenexttask:
ShutdownandremovetheIPaddressofF0/0interfaceonR2andR3.
RemoveEigrp100fromtheseroutersbeforeproceedingtothenexttask.
R3shouldstopadvertisingnetwork150.1.2.0/24inBGP

OnR2
R2(config)#intf0/0

www.ccieuniversity.com

R2(configif)#shut
R2(configif)#noipaddr
R2(config)#noroutereigrp100

OnR3
R3(config)#intf0/0
R3(configif)#shut
R3(configif)#noipaddr
R3(config)#noroutereigrp100
R3(config)#routerbgp300
R3(configrouter)#nonetwork150.1.2.0mask255.255.255.0

Task 6
ConfigureR1asfollows:
Ifnetwork2.0.0.0isupanditsadvertisedtoR1anditsinR1sBGPtable,R1should
takethefollowingactions:
R1shouldNOTadvertiseitsnetwork1.0.0.0/8toR3.
R1shouldadvertise2.0.0.0/8toR3
However,ifnetwork2.0.0.0/8isdown,thenR1shouldtakethefollowingactions
R1shouldadvertisenetwork1.0.0.0/8toR3.
R1shouldremovenetwork2.0.0.0/8fromitsBGPtable.

Notetheroutershaveconvergedandtheyareawareofallrouteswithinthe
topology:
R1#Showipbgp
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
*>1.0.0.0

NextHopMetric LocPrf Weight Path


0.0.0.0
0
32768 i

www.ccieuniversity.com

*>2.0.0.0
131.1.12.20
*>3.0.0.0
131.1.13.30
*>131.1.12.0/240.0.0.0
0
*>131.1.13.0/240.0.0.0
0

0 200i
0 300 i
32768 i
32768 i

Toconditionallyadvertiseselectedrouteswecanusethefollowingcommands:
Advertisemap
Nonexistmap
Existmap
Thissituationcallsfortheuseoftheadvertisemapandnonexistmapas
follows:

OnR1
R1(config)#accesslist1permit1.0.0.00.255.255.255
R1(config)#accesslist2permit2.0.0.00.255.255.255
R1(config)#routemapADVpermit10
R1(configroutemap)#matchipaddr1
R1(configroutemap)#exit
R1(config)#routemapNotTherepermit10
R1(configroutemap)#matchipaddr2
R1(configroutemap)#exit
Topreventconfusionyoushouldselectmeaningfulnamesfortheroutemaps.Note
theaccesslistnumbersandthenamesoftheroutemap.
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.13.3advertisemapADVnonexistmapNotThere
Theneighborcommandhasthefollowingroutemaps:
TheadvertisemapSpecifiesthenameoftheroutemapthatwillbe
advertisediftheconditionsofthenonexistmaparemet.
Nonexistmapspecifiesthenameoftheroutemapthatwillbecompared
totheadvertisemap.Iftheconditionismetandnomatchoccurs,theroute
willbeadvertised.Ifamatchoccurs,thentheconditionisNOTmet,andthe
routeiswithdrawn.
Noteifnetwork2.0.0.0isup,thennetwork1.0.0.0shouldNOTbeadvertisedtoR3,

www.ccieuniversity.com

sinceallthenetworksareupandadvertised,R1shouldwithdrawitsnetwork
(1.0.0.0/8):

OnR1
R1#Showipbgp
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.20
0200i
*>3.0.0.0131.1.13.300300i
*>131.1.12.0/240.0.0.0032768i
*>131.1.13.0/240.0.0.00
32768i
NoteR1doesNOTadvertiseitsnetwork(1.0.0.0/8)toR3:
R1#Showipbgpneighbors131.1.13.3advertisedroutes
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.12.20
0200i
*>131.1.12.0/240.0.0.0032768i
*>131.1.13.0/240.0.0.0032768i
NotethebgptableofR3doesnothavenetwork1.0.0.0network:

OnR3
R3#Showipbgp
BGPtableversionis34,localrouterIDis150.1.2.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.13.10100200i

www.ccieuniversity.com

*>3.0.0.00.0.0.0032768i
*>131.1.12.0/24131.1.13.100100i
r>131.1.13.0/24131.1.13.100100i

OnR2
R2(config)#intlo0
R2(configif)#shut
Notenetwork2.0.0.0isDOWN,therefore,R1shouldadvertiseitsnetwork(1.0.0.0)
toR3:

OnR1
R1#Showipbgpneighbors131.1.13.3advertisedroutes
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>131.1.12.0/240.0.0.0
032768i
*>131.1.13.0/240.0.0.0032768i
Notenetwork1.0.0.0isadvertisedtoR3.

Task7
RemovetheconfigurationcommandsenteredinTask6beforeyouproceedtothenext
task.

OnR1
R1(config)#noaccesslist1
R1(config)#noaccesslist2
R1(config)#noroutemapADV
R1(config)#noroutemapNotThere
R1(config)#routerbgp100
R1(configrouter)#noneighbor131.1.13.3advertisemapADVnonexistmapNotThere

www.ccieuniversity.com

Task8
SecondLabpolicy:
R1shouldbeconfiguredasfollows:
Ifbothnetworksareup,thenbothnetworksshouldbeadvertisedtoR3.
Ifnetwork1.0.0.0/8isdown,R2shouldNOTadvertisenetwork2.0.0.0/8toR3.

OnR1
R1(config)#accesslist1permit1.0.0.00.255.255.255
R1(config)#accesslist2permit2.0.0.00.255.255.255
R1(config)#routemapADVpermit10
R1(configroutemap)#matchipaddr2
R1(configroutemap)#exit
R1(config)#routemapEXISTpermit10
R1(configroutemap)#matchipaddr1
R1(configroutemap)#exit
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.13.3advertisemapADVexistmapEXIST
Notenetwork1.0.0.0isshutdown,therefore,R1willnotadvertisenetwork2.0.0.0to
R3.

OnR1
R1#Showipbgpneighbors131.1.13.3advertisedroutes
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeightPath
*>131.1.12.0/240.0.0.0032768i
*>131.1.13.0/240.0.0.0032768i

www.ccieuniversity.com

Task 9
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab3
RouteDampening

R1

R2
S0/0

S0/0
FrameRelay

F0/0

R3

R4

F0/0
S0/0S0/0
F0/0

F0/0

R5

FrameRelay

www.ccieuniversity.com

LabSetup
Configuretheframerelayconnectionbetweentheroutersinapointtopoint
manner.
ConfigureR2andR3sF0/0interfaceinVLAN23.
ConfigureR4andR5sF0/0interfaceinVLAN45.

Ipaddressing
Router Interface
R1
Lo0
FramerelayconnectiontoR2
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
FramerelayconnectiontoR4
F0/0interfaceconnectiontoR2
R4
Lo0
Lo1
Lo2
FramerelayconnectiontoR3
F0/0interfaceconnectiontoR5
R5
Lo0
F0/0interfaceconnectiontoR4

IPAddress
1.1.1.1 /8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
40.4.4.4/24
44.4.4.4/24
131.1.34.4/24
131.1.45.4/24
5.5.5.5/8
131.1.45.5/24

ASnumber
100
200

300

400

500

Task1
ConfigureanEBGPpeersessionbetweenR1andR2andonlyadvertisetheir
Loopback0interfaceinBGP.EnsurethattheseroutershaveNLRItoeachothers
Loopbackinterface.R1shouldbeinAS100andR2shouldbeinAS200.

OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.12.2remoteas200

www.ccieuniversity.com

R1(configrouter)#network1.0.0.0

OnR2
R2(config)#routerbgp200
R2(configrouter)#network2.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#noau

Toverifytheconfiguration:
R1#Showipbgp
BGPtableversionis3,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHop
MetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.200200i

Task2
ConfigureroutedampeningonR1usingthedefaultparameters.

OnR1
R1(configrouter)#routerbgp100
R1(configrouter)#bgpdampening
TheparametersofBGPdampeningareasfollows:
HalftimeOncearoutehasbeenassignedapenalty,thepenaltyis
decreasedevery5secondssuchthatwhenthehalfperiodexpires,the
accumulatedpenaltyisreducedbyhalf.Thedefaultvalueofhalftimeis15
minutesandtherangeis1to45minutes.
ReuseIfthepenaltiesforaflappingrouteisdecreasedenoughtofallbelow
thisvalue,therouteisreusable.Thedefaultis750andtherangeis1to
20000.
SuppressOncetheaccumulatedpenaltiesreachthisvalue,therouteis

www.ccieuniversity.com

suppressed.Thedefaultvalueis2000andtherangeis1 20000.
MaxSuppressTimeThemaximumtimeinminutesthataroutecanbe
suppressed.Thedefaultvalueis4timesthehalftimevalue(60)andthe
rangeis1to20000.
Thereforethisconfigurationperformsthefollowing:
Halftime=15minutes,reuse=750,Suppress=2000andMaxSuppressTime=60.

Task3
ConfigureanEBGPpeersessionbetweenR2andR3,andadvertisetheirLoopback0
interfaceinBGP.EnsurethattheseroutershaveNLRItoeachothersLoopback
interface.
R3shouldbeinAS300.

OnR2
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.23.3remoteas300

OnR3
R3(config)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#network3.0.0.0
R3(configrouter)#neighbor131.1.23.2remoteas200

Toverifytheconfiguration:
R3#Showipbgp
BGPtableversionis4,local routerIDis3.3.3.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.23.20200100i
*>2.0.0.0131.1.23.200200i
*>3.0.0.00.0.0.00
32768i

www.ccieuniversity.com

Task4
ConfigureroutedampeningonR3suchthatthehalflifeparameterissetto30
minutes.Thisroutershouldusethedefaultparametersforsuppresslimit,reuse,and
maximumsuppresstime.

OnR3
R3(configrouter)#bgpdampening30750200060

Task5
ConfigureanEBGPsessionbetweenR3andR4.AdvertiseLoopback0,Loopback1
andLoopback2interfaceofR4inBGP.
R4shouldbeconfiguredinAS400.

OnR4
R4(config)#routerbgp400
R4(configrouter)#netw4.0.0.0
R4(configrouter)#netw40.4.4.0mask255.255.255.0
R4(configrouter)#netw44.4.4.0mask255.255.255.0
R4(configrouter)#neighbor131.1.34.3remoteas300
R4(configrouter)#noau

OnR3
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.34.4remoteas400

Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis7,localrouterIDis44.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath

www.ccieuniversity.com

*>1.0.0.0131.1.34.30300200100i
*>2.0.0.0131.1.34.3
0300200i
*>3.0.0.0131.1.34.300300i
*>4.0.0.00.0.0.0032768i
*>40.4.4.0/240.0.0.00
32768i
*>44.4.4.0/240.0.0.0032768i

Task6
ConfigureanEBGPpeersessionbetweenR4andR5.R5shouldadvertiseitsLoopback0
interfaceinBGP.EnsurethattheseroutershaveNLRItoeachothersLoopbackinterface.
R5shouldbeinAS500.

OnR5
R5(config)#routerbgp500
R5(configrouter)#noau
R5(configrouter)#neighbor131.1.45.4remoteas400
R5(configrouter)#netw5.0.0.0

OnR4
R4(config)#routerbgp400
R4(configrouter)#neighbor131.1.45.5remoteas500

Toverifytheconfiguration:
R5#Showipbgp
BGPtableversionis8,localrouterIDis5.5.5.5
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.45.40400300200100i
*>2.0.0.0131.1.45.4
0400300200i
*>3.0.0.0131.1.45.40400300i
*>4.0.0.0131.1.45.40
0400i
*>5.0.0.00.0.0.0032768i
*>40.4.4.0/24131.1.45.400400i
*>44.4.4.0/24131.1.45.40
0400i

www.ccieuniversity.com

Task7
ConfigureroutedampeningonR4asfollows:
Network40.4.4.0/24shouldhavethefollowingdampeningparametersapplied:
MaxSuppressTimeof90
Reuse800
Suppress2400
HalfTimeof20
Network44.4.4.0/24shouldhavethefollowingdampeningparametersapplied:
MaxSuppressTimeof60
Reuse700
Suppress2000
HalfTimeof15

OnR4
R4(config)#accesslist40permit40.4.4.00.0.0.255
R4(config)#accesslist44permit44.4.4.00.0.0.255
R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr40
R4(configroutemap)#setdampening20800240090
R4(config)#routemapTESTpermit20
R4(configroutemap)#matchipaddr44
R4(configroutemap)#setdampening15700200060
R4(config)#routerbgp400
R4(configrouter)#bgpdampeningroutemapTEST
Notetheroutemapgivesusflexibility.Inthiscasewehaveappliedtwodifferent
routedampeningparameterstodifferentroutes.Thetwonetworksareidentified
withaccesslists.Theroutemapreferencestheaccesslistsandsetsthedampening
parametersbasedonthenetworks.

www.ccieuniversity.com

Task 8
ConfigureroutedampeningonR2usingthefollowingpolicy:
AlltheexistingandfutureprefixesfromAS300shouldhavethefollowing
parametersapplied:
MaxSuppressTimeof80
Reuse750
Suppress2200
HalfTime30

OnR2
R2(config)#ipaspathaccesslist1permit^300$
R2(config)#routemapTESTpermit10
R2(configroutemap)#matchaspath1
R2(configroutemap)#setdampening30750220080
R2(configroutemap)#exit
R2(config)#routerbgp200
R2(configrouter)#bgpdampeningroutemapTEST
Thecombinationofroutemapandtheaspathaccesslistcommandcanapply
bgpdampeningtoanASbasedontheASnumber.

Task 9
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab4
RouteAggregation

R1

R2
S0/0S0/0
FrameRelay

LabSetup:
Configureframerelayconnectionbetweentheroutersinapointtopointmanner.

Ipaddressing
Router Interface
R1
Lo0
FramerelayconnectiontoR2
R2
Lo0
Lo1
Lo2
Lo3
FramerelayconnectiontoR1

IPAddress
1.1.1.1 /8
131.1.12.1/24
2.2.0.2/24
2.2.1.2/24
2.2.2.2/24
2.2.3.2/24
131.1.12.2/24

ASnumber
100
200

www.ccieuniversity.com

Task1
ConfigureanEBGPsessionbetweentheroutersandonlyadvertisetheirLoopback
interfacesinBGP.

OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#neighbor131.1.12.2remoteas200

OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#network2.2.0.0mask255.255.255.0
R2(configrouter)#network2.2.1.0mask255.255.255.0
R2(configrouter)#network2.2.2.0mask255.255.255.0
R2(configrouter)#network2.2.3.0mask255.255.255.0

Toverifytheconfiguration
R2#Showipbgp
BGPtableversionis6,localrouterIDis2.2.3.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.12.100100i
*>2.2.0.0/240.0.0.0032768i
*>2.2.1.0/240.0.0.0032768i
*>2.2.2.0/240.0.0.0032768i
*>2.2.3.0/240.0.0.0032768i

Task2
ConfigureR2suchthatitsummarizesitsLoopbackinterfacesandadvertisesasingle
summarytoR1.R2shouldnotassignanatomicaggregatetothesummaryroute
whenitadvertisesittoanyofitsneighbors.

www.ccieuniversity.com

OnR2
R2(config)#Routerbgp200
R2(configrouter)#aggregateaddress2.2.0.0255.255.252.0

OnR1
R1#Showipbgp
BGPtableversionis7,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0
032768i
*>2.2.0.0/24131.1.12.200200i
*>2.2.0.0/22131.1.12.200200i
*>2.2.1.0/24131.1.12.20
0200i
*>2.2.2.0/24131.1.12.200200i
*>2.2.3.0/24131.1.12.200200i
Notebydefaulttheaggregateandallthespecificroutesareadvertised.A
summaryonlyargumentwillsuppresstheroutessothatonlythesummaryroute
isadvertised.

OnR2
R2#Showipbgp
BGPtableversionis7,localrouterIDis2.2.3.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.12.100100i
*>2.2.0.0/240.0.0.0032768i
*>2.2.0.0/220.0.0.032768i
*>2.2.1.0/240.0.0.0032768i
*>2.2.2.0/240.0.0.00
32768i
*>2.2.3.0/240.0.0.0032768i

www.ccieuniversity.com

Notenoneoftheprefixesaresuppresses.

OnR2
R2(config)#routerbgp200
R2(configrouter)#aggregateaddress2.2.0.0255.255.252.0 summaryonly
NotethesummaryonlyargumentwillsuppressalltheprefixesonR2suchthat
R2sneighborswontseethemorespecificroutes.

OnR2
R2#Showipbgp
BGPtableversionis11,localrouterIDis2.2.3.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0131.1.12.100100i
s> 2.2.0.0/240.0.0.0032768i
*>2.2.0.0/220.0.0.032768i
s> 2.2.1.0/240.0.0.0032768i
s> 2.2.2.0/240.0.0.0032768i
s> 2.2.3.0/240.0.0.0
032768i
Notetheletterstotheleftofthe>sign.Thesmeansthattheseprefixesare
suppressed.

OnR1
R1#Showipbgp
BGPtableversionis11,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.2.0.0/22131.1.12.200200i
NotetheonlyroutethatisadvertisedtoR1isthesummaryroute.Ifthesummary
routeisdisplayedinBGP,weshouldseetheatomicaggregateattribute

www.ccieuniversity.com

OnR2
R2#Showipbgp2.2.0.0/22
BGProutingtableentryfor2.2.0.0/22,version7
Paths:(1available,best#1,tableDefaultIPRoutingTable)
Advertisedtoupdategroups:
1
Local,(aggregatedby2002.2.3.2)
0.0.0.0from0.0.0.0(2.2.3.2)
OriginIGP,localpref100,weight32768,valid,aggregated,local,atomicaggregate,
best
Notetheoutputofthisdisplayrevealstwoattributesaggregatorandatomic
aggregate.
Theaggregatorattributeidentifiestherouterthatperformedtheaggregation.
Theatomicattributetellsusthatsomeinformationislostbecauseoftheaggregate.

OnR2
R2(config)#routerbgp200
R2(configrouter)#aggregateaddress2.2.0.0255.255.252.0summaryonly asset
NoteinBGP,anaggregateisonlycreatedifatleastamorespecificrouteofthe
aggregateexistsintheBGPtable.Itisrecommendedtoconfiguremostifnotallthe
specificrouteswithaNetworkstatement,becauseifonlyasingleNetworkis
configuredtosatisfytherequirements,andthatparticularNetworkgoesdownfor
whateverreason,thentheaggregateisremoved.
Anotherwaytoadvertiseanaggregateisbycreatingastaticroutethatmatchesthe
summaryrouteandthenredistributingthestaticintoBGPasfollows:
Iproute172.16.0.0255.255.252.0null0
Routerbgp200
Redistributestatic
Butsincethatisnotanoptionhere,weneedtoadvertiseeveryspecificprefix.
AnatomicaggregateThisisanattributethatisassignedtotheaggregateroute
automaticallyiftheassetargumentisnotusedintheaggregateaddress
command.
Whenanaggregationisperformed,certaininformationislost.InBGPthat
informationcanbetheASnumbersthattheprefixestraversedthroughtogettothe
routerthatisperformingtheaggregation.Ifitsnotcorrectedaroutingloopcan
occur.Inordertopreventtheroutingloopsfromoccurring,theASSET
argumentshouldbeusedwhenperformingaggregation.

www.ccieuniversity.com

Task3
Reconfiguretheroutersusingthefollowsdiagram/IPaddressinginformationandONLY
advertisetheirLoopbackinterfacesin BGP.

R2

R1
S0/0S0/0

F0/0

FrameRelay

R3
F0/0

Ipaddressing:
Router Interface
R1
Lo0
FramerelayconnectiontoR2
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
Lo1
Lo2
Lo3
F0/0interfaceconnectiontoR2

IPAddress
3.1.0.1 /24
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.1.1.3/24
3.1.2.3/24
3.1.3.3/24
3.1.4.3/24
131.1.23.3/24

OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw3.1.0.0mask255.255.255.0

ASnumber
100
200

300

www.ccieuniversity.com

R1(configrouter)#neighbor131.1.12.2remoteas200

OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.23.3remoteas300
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#network2.0.0.0

OnR3
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#netw3.1.1.0mask255.255.255.0
R3(configrouter)#netw3.1.2.0mask255.255.255.0
R3(configrouter)#netw3.1.3.0mask255.255.255.0
R3(configrouter)#netw3.1.4.0mask255.255.255.0

Toverifytheconfiguration:
OnR3
R3#Showipbgp
BGPtableversionis7,localrouterIDis3.1.4.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.23.200200i
*>3.1.0.0/24131.1.23.20200100i
*>3.1.1.0/24
0.0.0.0032768i
*>3.1.2.0/240.0.0.0032768i
*>3.1.3.0/240.0.0.0032768i
*>3.1.4.0/240.0.0.0
032768i

Task4
R2shouldaggregateallthenetworksin3.1.0.0/16addressspace.Thisaggregation
shouldbedonesuchthatR1inAS100istheonlyASthatreceivestheaggregateroute,

www.ccieuniversity.com

R3shouldnotreceivetheaggregateroute.R3shouldhaveastaticroutepointingtoR2
fornetwork3.1.0.0/24.

OnR2
R2(config)#ipaspathaccesslist1permit^300
TheabovecommandidentifiesASnumber300.
R2(config)#routemapTESTpermit10
R2(configroutemap)#matchaspath 1
Theroutemapcommandreferencestheaspathaccesslist.
R2(configrouter)#aggregateaddress3.1.0.0255.255.0.0assetsummaryonlyadvertisemapTEST
TheadvertisemapcommandassignstheroutemapTESTtotheaggregateaddress
command.

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis12,localrouterIDis3.1.0.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.12.200200i
*>3.1.0.0/240.0.0.0032768i
*>3.1.0.0/16
131.1.12.200200300i

OnR3
Showipbgp
BGPtableversionis8,localrouterIDis3.1.4.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.23.200200i

www.ccieuniversity.com

*>3.1.1.0/240.0.0.0032768i
*>3.1.2.0/240.0.0.0032768i
*>3.1.3.0/240.0.0.0032768i
*>3.1.4.0/240.0.0.0032768i
NoteR3getstheaggregateroutebutitrejectsitbecauseitseesitsownASnumberintheas
pathlist.R1receivesandprocessestheaggregateroutebecauseitdoesnotseeitsownAS
numberintheaspathlistadvertisedbyR2.

Task5
ConfigureR2suchthatacostof50isassignedtotheaggregateroute.

OnR2
R2(config)#routemapCOSTpermit10
R2(configroutemap)#setmetric50
R2(config)#routerbgp200
R2(configrouter)# aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertisemapTESTasset
attributemapCOST
Theattributemapidentifiesthenameoftheroutemapusedtosettheattribute/softheaggregate
route.

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis13,localrouterIDis3.1.0.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeightPath
*>2.0.0.0
131.1.12.20
0200i
*>3.1.0.0/24
0.0.0.00
32768i
0200300i
*>3.1.0.0/16131.1.12.2
50
NoteR1gettheaggregateroutewithacostof50.

www.ccieuniversity.com

Task6
ThepolicyforR1requiresthatitshouldreceivetheaggregaterouteplusoneofthemore
specificsubnets(3.1.3.0/24).Thisshouldbeperformedandtestedusingasuppressmap,
andunsuppressmap,butonlyoneofthesolutionsshouldbeimplemented.

TotesttheSuppressmap:

OnR2
R2(config)#accesslist1deny3.1.3.00.0.0.255
R2(config)#accesslist1permitany
R2(config)#routemapSUPPpermit10
R2(configroutemap)#matchipaddr1
R2(config)#routerbgp200
R2(configrouter)# aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertisemap
TESTassetattributemapCOSTsuppressmapSUPP

Toverifytheconfiguration:
Showipbgp
BGPtableversionis14,localrouterIDis3.1.0.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf WeightPath
*>2.0.0.0131.1.12.20
0200i
*>3.1.0.0/24
0.0.0.0
0
32768i
*>3.1.0.0/16131.1.12.250
0200300i
*>3.1.3.0/24131.1.12.20200300i

TotesttheUnsuppressmap:
OnR2
R2(config)#noaccesslist1
R2(config)#accesslist1permit3.1.3.00.0.0.255
R2(config)#routerbgp200
R2(configrouter)#no aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertise

www.ccieuniversity.com

mapTESTassetattributemapCOSTsuppressmapSUPP
R2(configrouter)#aggregateaddress3.1.0.0255.255.0.0summaryonlyadvertisemap
TESTassetattributemapCOST
R2(configrouter)#neighbor131.1.12.1unsuppressmapSUPP

OnR1
R1#Showipbgp
BGPtableversionis4,localrouterIDis3.1.0.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.12.200200i
*>3.1.0.0/16131.1.12.2500200300i
*>3.1.0.0/24
0.0.0.0
32768i
*>3.1.3.0/24131.1.12.2
0200300i

Task7
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab5
TheCommunityattribute

R1

R2
S0/0S0/0
FrameRelay

F0/0

R3

R4

F0/0
S0/0S0/0
FrameRelay

LabSetup:
Configuretheroutersthatareconnectedtotheframerelaycloudsinapointto
pointmanner.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.

www.ccieuniversity.com

Ipaddressing:
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
FramerelayconnectiontoR4
F0/0interfaceconnectiontoR2
R4
Lo0
FramerelayconnectiontoR3

IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.34.3/24
131.1.23.3/24
4.4.4.4/8
131.1.34.4/24

ASnumber
100

200

300

400

Task1
ConfiguretheroutersaccordingtotheabovechartandONLYadvertisetheirLoopback
interface/sinBGP.

OnR1
R1(config)#routerbgp100
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw11.0.0.0
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.12.2remoteas200

OnR2
R2(config)#routerbgp200
R2(configrouter)#netw2.0.0.0
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas300

OnR3
R3(config)#routerbgp300
R3(configrouter)#netw3.0.0.0
R3(configrouter)#noau
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#neighbor131.1.34.4remoteas400

www.ccieuniversity.com

OnR4
R4(config)#routerbgp400
R4(configrouter)#netw4.0.0.0
R4(configrouter)#noau
R4(configrouter)#neighbor131.1.34.3remoteas300

Toverifytheconfiguration:
R1#Showipbgp
BGPtableversionis6,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0
0.0.0.0032768i
*>2.0.0.0131.1.12.200200i
*>3.0.0.0131.1.12.20200300i
*>4.0.0.0131.1.12.20200300400i
*>11.0.0.00.0.0.0032768i

Task2
ConfigureR1suchthatwhenitadvertisesnetwork1.0.0.0/8toR2inAS200,the
networkisnotadvertisedtoanyofR2sIBGPorEBGPneighbors.

OnR1
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2sendcommunity
R1(configrouter)#neighbor131.1.12.2routemapTESTout
R1(config)#routemapTESTpermit10
R1(configroutemap)#matchipaddr1
R1(configroutemap)#setcommunitynoadvertise
R1(configroutemap)#routemapTESTpermit20

www.ccieuniversity.com

Iftheabovecommandisnotconfigured,noroutewillbeadvertisedtoR2.Thisis
thecatchallcommand,meaningthatwhateverthatwasnotspecifiedintheroute
mapTESTpermit10commandwillbecoveredbythiscommand.
R1(config)#accesslist1permit1.0.0.00.255.255.255
Bydefaultnocommunityattributeissenttoanyneighbor.Tospecifythata
communityattributeshouldbesenttoaBGPneighbor,theneighborsend
communitycommandisconfiguredintherouterconfigmode.
Thewellknowncommunitiesareasfollows:
InternetIfassignedtoanetwork/s,thatnetwork/sshouldbeadvertised.
LocalasIfassignedtoanetwork/s,thatnetwork/sshouldONLYbe
advertisedwithinthatAS.
NoadvertiseIfassignedtoanetwork/s.thatnetwork/sshouldNOTbe
advertisedtoanyBGPneighbor.
NoexportIfassignedtoanetwork/s,thatnetwork/sshouldNOTbe
advertisedtoanEBGPneighbor.

To verifytheconfiguration:
OnR3
R#Showipbgp
BGPtableversionis8,localrouterIDis3.3.3.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.23.200200i
*>3.0.0.00.0.0.0032768i
*>4.0.0.0131.1.34.400400i
*>11.0.0.0131.1.23.2
0200100i

Task3
ConfigureR2suchthatwhenitadvertisesitsnetwork2.0.0.0toR3inAS300,the
networkisonly advertisedtoAS300routers,AS300shouldNOTadvertisethisnetwork
toanyEBGPneighbor.DoNOTconfigureAS300toaccomplishthistask.

OnR2

www.ccieuniversity.com

R2(configrouter)#accesslist1permit2.0.0.00.255.255.255
R2(config)#routemapTESTpermit10
R2(configroutemap)#matchipaddr1
R2(configroutemap)#setcommunitynoexport
R2(configroutemap)#routemapTESTpermit20
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.23.3sendcommunity
R2(configrouter)#neighbor131.1.23.3routemapTESTout
Thisisanotherwellknowncommunity.Inthiscasenetwork2.0.0.0willONLYbe
advertisedtotheroutersinAS300.AS300routerswillNOTadvertisethisnetwork
toanyoftheirEBGPneighbor/s.

Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis12,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHop
MetricLocPrfWeightPath
*>3.0.0.0131.1.34.300300i
*>4.0.0.00.0.0.0032768i
*>11.0.0.0131.1.34.3
0300200100i

Task4
ConfigureR3inAS300toadvertisenetwork2.0.0.0/8toitsEBGPneighbors.DoNOT
removetheconfigurationcommand/sfromtheprevioustask.

OnR3
R3(config)#accesslist1permit2.0.0.00.255.255.255
R3(config)#routemapTESTpermit10
R3(configroutemap)#matchipaddr1

www.ccieuniversity.com

R3(configroutemap)#setcommunityinternet
R3(configroutemap)#routemapTESTpermit20
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2sendcommunity
R3(configrouter)#neighbor131.1.23.2routemapTESTin
NoteinthiscasetheroutemapTESTcommandisappliedtotheinbound,
becauseitshouldaffectthelocalrouterforthatnetworkandcommunity.

Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis17,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>2.0.0.0131.1.34.30300200i
*>3.0.0.0131.1.34.30
0300i
*>4.0.0.00.0.0.0
0
32768i
*>11.0.0.0131.1.34.3
0300200100i

Task5
ConfigureR4suchthatwhenitadvertisesitsnetwork4.0.0.0/8inBGP,thisnetworkis
onlyadvertisedwithinitsownAS(AS400).DoNOTusefilteringofanykindto
accomplishthistask.

OnR4
R4(config)#accesslist1permit4.0.0.00.255.255.255
R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr1
R4(configroutemap)#setcommunitylocalas

www.ccieuniversity.com

R4(configroutemap)#routemapTESTpermit20
R4(config)#routerbgp400
R4(configrouter)#network4.0.0.0routemapTEST
NotethelocalascommunityattributeisNOTsenttoagivenneighbor,its
advertisedusingaroutemapthathasthelocalascommunityattributeattached.

Toverifytheconfiguration:
OnR3
R3#Showipbgp
BGPtableversionis6,localrouterIDis3.3.3.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrf Weight Path
*>2.0.0.0
131.1.23.2
0
0 200i
*>3.0.0.0
0.0.0.0
0
32768 i
*>11.0.0.0131.1.23.2
0 200100i

Task6
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenexttask.

www.ccieuniversity.com

Lab6
TheASPathattribute

R1

R2
S0/0S0/0

F0/0

F0/0

FrameRelay

R3

R4

F0/0F0/0
S0/0

S0/0
FrameRelay

LabSetup:
Configuretheroutersthatareconnectedtotheframerelaycloudsinapointto
pointmanner.
R1andR4sF0/0interfaceshouldbeconfiguredinVLAN14.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.

www.ccieuniversity.com

Ipaddressing:
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
R4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3

IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24

ASnumber
100

200

200

200

Task1
ConfiguretheroutersastheabovediagramwithIPaddressingandASnumbersidentified
inthechart,andonlyadvertisetheLoopbackinterfaceoftheroutersinBGP.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummarizationinRIPv2
routingprotocol.

OnR1
R1(configif)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.14.4remoteas 200
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#netw11.0.0.0
R1(configrouter)#netw1.0.0.0
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#network131.1.0.0

OnR2
R2(config)#routerbgp200
R2(configrouter)#noau

www.ccieuniversity.com

R2(configrouter)#nosyn
R2(configrouter)#netw2.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas 200
R2(configrouter)#neighbor131.1.34.4remoteas200
R2(configrouter)#neighbor131.1.23.3nexthopself
R2(configrouter)#neighbor131.1.34.4nexthopself
R2(config)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0

OnR3
R3(config)#routerbgp200
R3(configrouter)#noau
R3(configrouter)#nosyn
R3(configrouter)#netw3.0.0.0
R3(configrouter)#neighbor131.1.34.4remoteas 200
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0

OnR4
R4(config)#routerbgp200
R4(configrouter)#nosyn
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remoteas 200
R4(configrouter)#neighbor131.1.23.2remoteas200
R4(configrouter)#neighbor131.1.34.3nexthopself
R4(configrouter)#neighbor131.1.23.2nexthopself
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0

www.ccieuniversity.com

Task2
ConfigureR1inAS100suchthatroutersinAS200usethelinkthroughR2toreachits
network1.0.0.0/8.UsetheASPathattributetoaccomplishthistask.

OnR1
R1(config)#accesslist1permit1.0.0.00.255.255.255
R1(config)#routemapTEST1permit10
R1(configroutemap)#matchipaddr1
R1(configroutemap)#setaspathprepend100100100100
R1(configroutemap)#exit
R1(config)#routemapTEST1permit20
R1(configroutemap)#routerbgp100
R1(configrouter)#neighbor131.1.14.4routemapTEST1out

OnR4
R4#Showipbgp
BGPtableversionis17,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf Weight Path
*>i1.0.0.0131.1.23.201000100i
*131.1.14.100100100100100100i
*>i2.0.0.0
131.1.23.201000i
*>i3.0.0.0131.1.34.301000i
*>4.0.0.00.0.0.0032768i
*i11.0.0.0131.1.23.2
01000100i
*>131.1.14.100100i
NotetheASpathattributeisusedtoinfluencethedegreeofpreferenceinanother
AS.R4willgothroughR2toreachnetwork1.0.0.0/8.

www.ccieuniversity.com

Task3
ConfigureR1inAS100suchthattheroutersinAS200usethelinkthroughR4toreach
network11.0.0.0/8.UsetheASPathattributetoaccomplishthistask

OnR1
R1(config)#accesslist11permit11.0.0.00.255.255.255
R1(config)#routemapTEST11 permit10
R1(configroutemap)#matchipaddr11
R1(configroutemap)#setaspathprepend100100100100
R1(configroutemap)#routerbgp100
R1(configrouter)#neighbor131.1.12.2routemapTEST11 out

Toverifytheconfiguration:
OnR2
R2#Showipbgp
BGPtableversionis28,localrouterIDis2.2.2.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf Weight Path
*>1.0.0.0131.1.12.10
0100i
*>2.0.0.0
0.0.0.00
32768i
*>i3.0.0.0131.1.23.30
100
0i
*>i4.0.0.0131.1.34.40
100
0i
*>i11.0.0.0131.1.34.40
100
0100i
*
131.1.12.1
0
0100100100100100i

Task 4
Erasethestartupconfigurationandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab7
TheLocalPrefattribute

R1

R2
S0/0S0/0

F0/0

F0/0

FrameRelay

R4

R3

F0/0F0/0
S0/0

S0/0
FrameRelay

Ipaddressing:
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4
R2
Lo0
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
R4
Lo0
F0/0interfaceconnectiontoR1
Framerelayconnection toR3

IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24

ASnumber
100

200

200

200

www.ccieuniversity.com

Task1
ConfiguretheroutersbasedonthepreviouslabstopologyandIPaddressingscheme.
OnlyadvertisetheLoopbackinterface/softheroutersinBGP.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummarizationinRIPv2
routingprotocol.

OnR1
R1(configif)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.14.4remoteas 200
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#netw11.0.0.0
R1(configrouter)#netw1.0.0.0
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#network131.1.0.0

OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#nosyn
R2(configrouter)#netw2.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas 200
R2(configrouter)#neighbor131.1.34.4remoteas200
R2(configrouter)#neighbor131.1.23.3nexthopself
R2(configrouter)#neighbor131.1.34.4nexthopself
R2(config)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0

OnR3
R3(config)#routerbgp200
R3(configrouter)#noau
R3(configrouter)#nosyn

www.ccieuniversity.com

R3(configrouter)#netw3.0.0.0
R3(configrouter)#neighbor131.1.34.4remoteas 200
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0

On R4
R4(config)#routerbgp200
R4(configrouter)#nosyn
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remoteas 200
R4(configrouter)#neighbor131.1.23.2remoteas200
R4(configrouter)#neighbor131.1.34.3nexthopself
R4(configrouter)#neighbor131.1.23.2nexthopself
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0

Task2
Ensurethattheroutersin AS200useR4toreachnetwork1.0.0.0/8inAS100.Local
Prefattributemustbeusedtoaccomplishthistask.

OnR4
R4(config)#accesslist1permit1.0.0.00.255.255.255
R4(config)#routemapTEST1permit10
R4(configroutemap)#matchipaddr1
R4(configroutemap)#setLocalpreference400
R4(configroutemap)#exit
R4(config)#routemapTEST1permit20
R4(configroutemap)#routerbgp200
R4(configrouter)#neighbor131.1.14.1routemapTEST1in

www.ccieuniversity.com

ThelocalpreferenceattributeisusedtopreferanexitpointfromthelocalAS.
Unliketheweightattribute,thelocalpreferenceattributeispropagatedthroughout
thelocalAS.IftherearemultipleexitpointsfromthelocalAS,thelocalpreference
attributeisusedtoselecttheexitpointforaspecificorallroutes.Sincethelocal
preferenceattributeaffectstherouterswithintheAS,theroutemapshouldbe
configuredintheindirection.

Toverifytheconfiguration:
OnR2
R2#Showipbgp
BGPtableversionis9,localrouterIDis2.2.2.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>i1.0.0.0131.1.34.4
04000100i
*131.1.12.100100i
*>2.0.0.00.0.0.0032768i
*>i3.0.0.0131.1.23.3
01000i
*>i4.0.0.0131.1.34.401000i
*i11.0.0.0131.1.34.401000100i
*>131.1.12.10
0100i

Task 3
EnsurethattheroutersinAS200useR2toreachnetwork11.0.0.0/8.LocalPref
attributemustbeusedtoaccomplishthistask.

OnR2
R2(config)#accesslist11permit11.0.0.00.255.255.255
R2(config)#routemapTEST permit10
R2(configroutemap)#matchipaddr11
R2(configroutemap)#setLocalpreference400
R2(config)#routemapTEST permit20

www.ccieuniversity.com

R2(configroutemap)#routerbgp200
R2(configrouter)#neighbor131.1.12.1routemapTESTin

Toverifytheconfiguration:
OnR2
R2#Showipbgp
BGPtableversionis7,localrouterIDis2.2.2.2
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*1.0.0.0
131.1.12.100100i
*>i131.1.34.404000100i
*>2.0.0.00.0.0.0
032768i
*>i3.0.0.0131.1.23.301000i
*>i4.0.0.0131.1.34.401000i
*>11.0.0.0131.1.12.104000 100i

OnR3
R3#Showipbgp
BGPtableversionis14,localrouterIDis3.3.3.3
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>i1.0.0.0131.1.34.404000100i
*>i2.0.0.0131.1.23.201000i
*>3.0.0.00.0.0.0
032768i
*>i4.0.0.0131.1.34.401000i
*>i11.0.0.0131.1.23.204000100i

OnR4
R4#Showipbgp

www.ccieuniversity.com

BGPtableversionis11,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.0
131.1.14.104000100i
*>i2.0.0.0131.1.23.201000i
*>i3.0.0.0131.1.34.301000i
*>4.0.0.00.0.0.0
032768i
*>i11.0.0.0131.1.23.204000100i
*131.1.14.100100i

Task 4
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab8
TheWeightattribute

R1

R2
S0/0S0/0

F0/0

F0/0

FrameRelay

R4

R3

F0/0

F0/0
S0/0S0/0
FrameRelay

Ipaddressing:
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4
R2
Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
Lo1
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
R4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3

IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
22.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
33.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24

ASnumber
100

200

300

400

www.ccieuniversity.com

Task1
ConfigureBGPontheroutersbasedonthetopologyandtheIPaddressingchartprovided
above.ONLYadvertisetheLoopbackinterface/sinBGP.TheBGPPeersessionsshould
beestablishedaccordingtothetopology.Ensurethattherouterscanreachtheadvertised
Loopbackinterfaces.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummaryinRIPv2routing
protocol.

OnR1
R1(configif)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#neighbor131.1.14.4remoteas 400
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#netw11.0.0.0
R1(configrouter)#netw1.0.0.0
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#network131.1.0.0

On R2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw22.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas 300
R2(config)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0

OnR3
R3(config)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#netw3.0.0.0
R3(configrouter)#netw33.0.0.0

www.ccieuniversity.com

R3(configrouter)#neighbor131.1.34.4remoteas 400
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0

OnR4
R4(config)#routerbgp400
R4(configrouter)#nosyn
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remoteas 300
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0

Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis8,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrf WeightPath
*1.0.0.0131.1.34.30300200100i
*>131.1.14.100100i
*2.0.0.0131.1.34.3
0300200i
*>131.1.14.10100200i
*3.0.0.0131.1.14.10100200300i
*>131.1.34.3
00300i
*>4.0.0.00.0.0.0032768i
*11.0.0.0131.1.34.30300200100i
*>131.1.14.100100i
*22.0.0.0131.1.34.30300200i
*>131.1.14.10100200i
*33.0.0.0131.1.14.10100200300i

www.ccieuniversity.com

*>131.1.34.300300i

Task2
ConfigureR1inAS100touseAS200toreachalltheprefixeswithinthistopologyyou
mustuseTheWeightattributetoaccomplishthistask.

OnR1
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2weight40000
TheweightattributeisaCiscodefinedattributethatislocaltotherouter.This
attributeisNOTadvertisedtoanyneighboringrouter.Iftherearemorethanone
routetoagivendestination,theweightattributecandecidewhichpathisbetter.
Thehigherthevaluethehigherthepreference.

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis13,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHop
MetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.2040000200i
*131.1.14.4
0400300200i
*>3.0.0.0131.1.12.240000200300i
*131.1.14.40400300i
*>4.0.0.0131.1.12.2
40000200300400i
*131.1.14.400400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.20
40000200i
*131.1.14.40400300200i
*>33.0.0.0131.1.12.240000200300i
*131.1.14.4
0400300i

www.ccieuniversity.com

Task3
ThepolicyofAS100ischangedtothefollowing:
R1inAS100shoulduseR4inAS400toreachprefixes33.0.0.0/8
ExistingandfutureprefixesfromAS200shouldhaveaweightattributeof54000
throughR2.

OnR1
R1(config)#accesslist33permit33.0.0.0
R1(config)#routemapTEST33permit10
R1(configroutemap)#matchipaddr33
R1(configroutemap)#setweight45000
R1(config)#routemapTEST33permit20
R1(config)#ipaspathaccesslist1permit^200$
R1(config)#routemapTEST1permit10
R1(configroutemap)#matchaspath1
R1(configroutemap)#setweight54000
R1(config)#routemapTEST1permit20
R1(configroutemap)#routerbgp100
R1(configrouter)#neighbor131.1.12.2routemapTEST1in
R1(configrouter)#neighbor131.1.14.4routemapTEST33in

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis12,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i

www.ccieuniversity.com

*>2.0.0.0131.1.12.2054000200i
*131.1.14.40400300200i
*>3.0.0.0131.1.12.240000200300i
*
131.1.14.40400300i
*>4.0.0.0131.1.12.240000200300400i
*131.1.14.400400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.2054000200i
*131.1.14.40400300 200i
*33.0.0.0131.1.12.240000200300i
*>131.1.14.445000400300i

Task4
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab9
MultiExitDiscriminatorattribute

R1

R2
S0/0S0/0

F0/0

F0/0

FrameRelay

R3

R4
F0/0

F0/0
S0/0S0/0
FrameRelay

LabSetup:

Ipaddressing:
Router Interface
R1
Lo0
Lo1
Framerelayconnection toR2
F0/0interfaceconnectiontoR4
R2
Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3

IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
22.2.2.2/8
131.1.12.2/24
131.1.23.2/24

ASnumber
100

200

www.ccieuniversity.com

R3

R4

Lo0
Lo1
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3

3.3.3.3/8
33.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24

200

200

Task1
ConfigureBGPonallroutersaccordingtothetopologyandtheIPaddressingchart,and
onlyadvertisetheirLoopbackinterface/sinBGP.Ensurethattheroutershave
reachabilitytoeveryadvertisednetwork
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0 /24,
131.1.34.0/24and131.1.14.0/24)inRIPv2,disableautosummaryinRIPv2routing
protocol.

OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw11.0.0.0
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#neighbor131.1.14.4remoteas200
R1(config)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#netw131.1.0.0

OnR2
R2(config)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw22.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas200
R2(configrouter)#neighbor131.1.34.4remoteas200
R2(configrouter)#neighbor131.1.34.4nexthopself
R2(configrouter)#neighbor131.1.23.3nexthopself
R2(config)#routerrip

www.ccieuniversity.com

R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0

OnR3
R3(config)#routerbgp200
R3(configrouter)#noau
R3(configrouter)#netw3.0.0.0
R3(configrouter)#netw33.0.0.0
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#neighbor131.1.34.4remoteas200
R3(config)#routerrip
R3(configrouter)#noau
R3(configrouter)#ver2
R3(configrouter)#netw131.1.0.0

OnR4
R4(configif)#routerbgp200
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remoteas200
R4(configrouter)#neighbor131.1.23.2remoteas200
R4(configrouter)#neighbor131.1.23.2nexthopself
R4(configrouter)#neighbor131.1.34.3nexthopself
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(config)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis22,localrouter IDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale

www.ccieuniversity.com

Origincodes:i IGP,e EGP,? incomplete


NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*2.0.0.0131.1.14.40200i
*>131.1.12.200200i
* 3.0.0.0131.1.12.20200i
*>131.1.14.40200i
*4.0.0.0131.1.14.40
0200i
*>131.1.12.20200i
*>11.0.0.00.0.0.0032768i
*22.0.0.0131.1.14.4
0200i
*>131.1.12.200200i
*33.0.0.0131.1.12.20200i
*>131.1.14.4
0200i

Task2
ConfigureAS200suchthattheroutersinAS100takeR4toreachanyprefixes
advertisedinAS200.ManipulateMEDtoaccomplishthistask.

OnR2
R2(config)#routemapTESTpermit10
R2(configroutemap)#setmetric100
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1routemapTESTout
MEDisusedasasuggestiontoanexternalASregardingthepreferredrouteinto
theASthatisadvertisingthemetric.Thereasonsuggestionisusedhereisbecause
theASthatisreceivingMEDattributecoulduseanotherattributesuchasWeight
thatwilloverridetheMEDattribute.Thelowerthevaluethebetterthepath.

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis27,localrouterIDis11.1.1.1

www.ccieuniversity.com

Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetric LocPrf Weight Path
*>1.0.0.0
0.0.0.0032768i
*2.0.0.0131.1.12.21000200i
*>
131.1.14.40200i
*3.0.0.0
131.1.12.21000200i
*>
131.1.14.40200i
*4.0.0.0131.1.12.21000200i
*>
131.1.14.400200i
*>11.0.0.00.0.0.0032768i
*22.0.0.0131.1.12.21000200i
*>
131.1.14.40200i
*33.0.0.0131.1.12.21000200i
*>131.1.14.40200 i

Task3
Removetheconfigurationcommandfromtheprevioustaskbeforeproceedingtothe
nexttask.

OnR2
R2(config)#noroutemapTESTpermit10
R2(config)#routerbgp200
R2(configrouter)#noneighbor131.1.12.1routemapTESTout

Task4
ConfigureAS200suchthatAS100canreachprefix33.0.0.0/24throughR4andPrefix
3.0.0.0/8throughR2.UtilizeMEDtoaccomplishthistask.

OnR2
R2(config)#accesslist3permit3.0.0.0
R2(config)#accesslist33permit33.0.0.0
R2(config)#routemapTESTpermit10

www.ccieuniversity.com

R2(configroutemap)#matchipaddr3
R2(configroutemap)#setmetric50
R2(config)#routemapTESTpermit20
R2(configroutemap)#matchipaddr33
R2(configroutemap)#setmetric100
R2(config)#routemapTESTpermit30
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1routemapTESTout

OnR4
R4(config)#accesslist3permit3.0.0.0
R4(config)#accesslist33permit33.0.0.0
R4(config)#routemapTESTpermit10
R4(configroutemap)#matchipaddr3
R4(configroutemap)#setmetric100
R4(config)#routemapTESTpermit20
R4(configroutemap)#matchipaddr33
R4(configroutemap)#setmetric50
R4(config)#routemapTESTpermit30
R4(config)#routerbgp200
R4(configrouter)#neighbor131.1.14.1routemapTESTout

To verifytheconfiguration
OnR1
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*2.0.0.0131.1.12.200200i
*>
131.1.14.40200i

www.ccieuniversity.com

*>3.0.0.0131.1.12.2500200i
*131.1.14.41000200i
*4.0.0.0131.1.12.20200i
*>131.1.14.400200i
*>11.0.0.00.0.0.0032768i
*22.0.0.0
131.1.12.200200i
*>131.1.14.40200i
NetworkNextHopMetricLocPrfWeightPath
*33.0.0.0131.1.12.21000200i
*>131.1.14.4500200i

Task5
RemoveBGProutingprotocolandanypreviousBGPrelatedcommand/sfromthe
previoustasksandreconfigurethembasedonthechartbelow.Theseroutersshould
ONLYadvertisetheirloopbackinterface/sinBGP.
Router Interface
R1
Lo0
Lo1
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4
R2
Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
R3
Lo0
Lo1
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
R4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3

OnR1
R1(config)#Norouterbgp100

OnR2
R2(config)#norouterbgp200

IPAddress
1.1.1.1/8
11.1.1.1/8
131.1.12.1/24
131.1.14.1/24
2.2.2.2/8
22.2.2.0/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
33.3.3.0/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24

ASnumber
100

200

300

400

www.ccieuniversity.com

R2(config)#noaccesslist3
R2(config)#noaccesslist33
R2(config)#noroutemapTEST

OnR4
R4(config)#norouterbgp200
R4(config)#noaccesslist3
R4(config)#noaccesslist33
R4(config)#noroutemapTEST

OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#netw11.0.0.0
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#neighbor131.1.14.4remoteas400

OnR2
R2(config)#routerbgp200
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw22.0.0.0
R2(configrouter)#noau
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas300

OnR3
R3(config)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#netw3.0.0.0
R3(configrouter)#netw33.0.0.0
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#neighbor131.1.34.4remoteas400

OnR4
R4(config)#routerbgp400
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.14.1remoteas100

www.ccieuniversity.com

R4(configrouter)#neighbor131.1.34.3remoteas300

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origin codes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.20
0200i
*3.0.0.0131.1.12.20200300i
*>131.1.14.40400300i
*4.0.0.0131.1.12.2
0200300400i
*>131.1.14.400400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.20
0200i
*33.0.0.0131.1.12.20200300i
*>131.1.14.40400300i

Task6
ConfigureR4inAS400topassaMED of100toR1inAS100andconfigureR2inAS
200topassaMEDof120toR1inAS100.

OnR2
R2(config)#routemapTESTpermit10
R2(configroutemap)#setmetric120
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1routemapTESTout

OnR4
R4(config)#routemapTESTpermit10

www.ccieuniversity.com

R4(configroutemap)#setmetric100
R4(config)#routerbgp400
R4(configrouter)#neighbor131.1.14.1routemapTESTout

Toverifytheconfiguration:
R1#Showipbgp
BGPtableversionis18,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
Network
NextHopMetricLocPrfWeight Path
*>1.0.0.0
0.0.0.0032768i
*>2.0.0.0131.1.12.21200200i
*3.0.0.0131.1.12.21200200300i
*>
131.1.14.41000400300i
*4.0.0.0131.1.12.21200200300400i
*>131.1.14.41000400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0131.1.12.21200200i
*33.0.0.0131.1.12.21200200300i
*>
131.1.14.41000400300i

Task7
EnsurethatR1inAS100alwaystakesR4toreachallotherprefixesadvertisedinthis
topology.UtilizeMEDinAS100toaccomplishthistask.

OnR1
R1(config)#routerbgp100
R1(configrouter)#bgpalwayscomparemed
R1(configrouter)#bgpbestpathaspathignore
Notethetabkeywillnotworkwhenenteringthebgpbestpathaspathignore
command.
TheMEDasstatedinRFC1771,isanoptionalnontransitiveattribute.Thevalue
ofthisattributemaybeusedbytheBGPbestpathselectionprocesstodiscriminate
amongmultipleexistpointstoaneighboringAS.Thelowerthevaluethebetterthe
path.TheMEDvaluecomparisonisdoneonlyamongpathsfromthesameAS.The

www.ccieuniversity.com

bgpalwayscomparemedcommandisusedtochangethisbehaviorbyenforcing
MEDcomparisonbetweenallpaths,regardlessoftheASfromwhichthepathsare
received.
Notethesecondcommandbgpbestpathaspathignoreisusedtoaccomplishthis
task,thiscommandisneededbecauseaspathislookedatfirstbeforeMED.Once
BGProutingprotocolistoldtoignoretheaspathattributeinbestpathcalculation,
BGPwilllookattheMEDvaluenext.
Notethefollowingdisplayisperformedbeforethebgpbestpathaspathignore
command.

OnR1
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.21200200i
*131.1.14.41000400300200i
*3.0.0.0131.1.12.21200200300i
*>131.1.14.4100
0400300i
*4.0.0.0131.1.12.21200200300400i
*>131.1.14.41000400i
*>11.0.0.00.0.0.00
32768i
*>22.0.0.0131.1.12.21200200i
*131.1.14.41000400300200i
*33.0.0.0131.1.12.2120
0200300i
*>131.1.14.41000400300i
Enterthefollowingcommandtoseethebgptableafterthebgpbestpathaspath
ignorecommand:
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath

www.ccieuniversity.com

*>1.0.0.0
0.0.0.0032768i
*2.0.0.0131.1.12.21200200i
*>131.1.14.4
1000400300200i
*3.0.0.0
131.1.12.21200200300i
*>131.1.14.4
1000400300i
*4.0.0.0131.1.12.21200200300400i
*>
131.1.14.4
1000400i
*>11.0.0.00.0.0.0032768i
*22.0.0.0131.1.12.21200200i
NetworkNextHopMetricLocPrfWeightPath
*>131.1.14.4
1000400300200i
*33.0.0.0131.1.12.21200200300i
*>
131.1.14.4
1000400300i

Task8
RemovetheBGPconfigurationfromtheprevioustwotasks(Task6).ConfigureR4in
AS400topassaMEDvalueof100toR1inAS100R2inAS200shouldNOTpass
anyMEDvaluestoR1.EnsurethatR1inAS100takesR4toreachanyprefixadvertised
inthistopology.

NoteR2isnotgivingaMEDvaluetoR1.R1willalwaystakethepathwiththe
lowestMED.R4isgivingaMEDvalueof100toR1.
R1willtakethepaththroughR2.
Totestthescenario:

OnR2
ToremovethecommandfromR2
R2(config)#routerbgp200
R2(configrouter)#noneighbor131.1.12.1routemapTESTout
R2(config)#noroutemapTEST

OnR4
ToremovethecommandfromR4
R4(config)#routerbgp400
R4(configrouter)#noneighbor131.1.14.1routemapTESTout

www.ccieuniversity.com

R4(config)#noroutemapTEST

OnR1
ToremovethecommandfromR1
R1(config)#routerbgp100
R1(configrouter)#nobgpalwayscomparemed
R1(configrouter)#nobgpbestpathaspathignore

OnR4
ToconfigureR4togiveaMEDvalueof100toR1
R4(config)#routemapTESTpermit10
R4(configroutemap)#setmetric100
R4(config)#routerbgp400
R4(configrouter)#neighbor131.1.14.1routemapTESTout

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis12,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHop
MetricLocPrfWeightPath
*>1.0.0.0
0.0.0.00
32768i
*>2.0.0.0131.1.12.20
0200i
*3.0.0.0
131.1.14.4100
0400300i
*>
131.1.12.2
0200300i
*>4.0.0.0131.1.14.4100
0400i
*>11.0.0.0
0.0.0.00
32768i
*>22.0.0.0131.1.12.20
0200i
*33.0.0.0
131.1.14.4100
0400300i
*>
131.1.12.2
0200300i
NoteR1takesthepathwiththelowerMEDvalue,inthiscaseR2.

www.ccieuniversity.com

OnR1
R1(config)#routerbgp100
R1(configrouter)#bgpbestpathmedmissingasworst
NotetheabovecommandtellsBGPtosetthepathwiththemissingMEDtobethe
worstpath.

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis8,localrouterIDis11.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.200200i
*
131.1.14.41000400300200i
*3.0.0.0131.1.12.242949672950200300i
*>131.1.14.41000400300i
*4.0.0.0131.1.12.242949672950200300400i
*>131.1.14.41000400i
*>11.0.0.00.0.0.0032768i
*>22.0.0.0
131.1.12.200200i
*131.1.14.41000400300200i
*33.0.0.0131.1.12.242949672950200300i
*>
131.1.14.41000400300i
NoteR1takesthepaththroughR4togetalltheroutesexceptthenetwork/s
advertisedbyR2.Canyouguessthecommandtofixthissituation?
Ifyoucannotthinkofthecommandtoresolvethisproblem,doNOTsignupfor
thelabexamyet(justkidding),checkthesolutionintask7.

Task 9
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab10
FilteringRoutesUsingAccesslistsand
Prefixlists

R1

R2
S0/0S0/0

F0/0

F0/0

FrameRelay

R4

R3

F0/0F0/0
S0/0

S0/0
FrameRelay

LabSetup:

Ipaddressing:
Router Interface
R1
Lo0
Lo1
Lo2
Lo3
Lo4
FramerelayconnectiontoR2
F0/0interfaceconnectiontoR4

IPAddress
1.1.0.1/24
1.1.1.1/24
1.1.2.1/24
1.1.3.1/24
1.1.4.1/24
131.1.12.1/24
131.1.14.1/24

ASnumber
100

www.ccieuniversity.com

R2

R3

R4

Lo0
Lo1
FramerelayconnectiontoR1
F0/0interfaceconnectiontoR3
Lo0
Lo1
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
Lo0
F0/0interfaceconnectiontoR1
FramerelayconnectiontoR3

2.2.2.2/8
22.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
33.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.14.4/24
131.1.34.4/24

200

300

400

Task1
ConfigureBGPontheroutersaccordingtotheabovechartandthediagram.TheBGP
routersshouldonlyadvertisetheirLoopbackinterfacesinBGP.Ensurethattherouters
canreachalltheadvertisednetworksinthistopology.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.14.0/24,
131.1.34.0/24and131.1.23.0/24)inRIPv2,disableautosummaryinRIPv2routing
protocol.

OnR1
R1(config)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.1.0.0 mask255.255.255.0
R1(configrouter)#netw1.1.1.0 mask255.255.255.0
R1(configrouter)#netw1.1.2.0 mask255.255.255.0
R1(configrouter)#netw1.1.3.0 mask255.255.255.0
R1(configrouter)#netw1.1.4.0 mask255.255.255.0
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#neighbor131.1.14.4remoteas400
R1(configrouter)#routerrip
R1(configrouter)#netw131.1.0.0
R1(configrouter)#noau
R1(configrouter)#ver2

OnR2
R2(config)#routerbgp200
R2(configrouter)#netw2.0.0.0
R2(configrouter)#netw22.0.0.0
R2(configrouter)#noau

www.ccieuniversity.com

R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas300
R2(configrouter)#routerrip
R2(configrouter)#netw131.1.0.0
R2(configrouter)#noau
R2(configrouter)#ver2

OnR3
R3(config)#routerbgp300
R3(configrouter)#noau
R3(configrouter)#netw3.0.0.0
R3(configrouter)#netw33.0.0.0
R3(configrouter)#neighbor131.1.23.2remoteas200
R3(configrouter)#neighbor131.1.34.4 remoteas 400
R3(configrouter)#routerrip
R3(configrouter)#ver2
R3(configrouter)#noau
R3(configrouter)#netw131.1.0.0

OnR4
R4(config)#routerbgp400
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.14.1remoteas100
R4(configrouter)#neighbor131.1.34.3 remoteas 300
R4(configrouter)#routerrip
R4(configrouter)#netw131.1.0.0
R4(configrouter)#noau
R4(configrouter)#ver2

Toverifytheconfiguration:
OnR4
R4#Showipbgp
BGPtableversionis11,localrouterIDis4.4.4.4
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete

www.ccieuniversity.com

NetworkNextHopMetricLocPrfWeightPath
*>1.1.0.0/24131.1.14.100100i
*>1.1.1.0/24131.1.14.1
00100i
*>1.1.2.0/24131.1.14.100100i
*>1.1.3.0/24131.1.14.100100i
*>1.1.4.0/24131.1.14.10
0100i
*>2.0.0.0131.1.14.10100200i
*>3.0.0.0131.1.14.10100300i
NetworkNextHopMetricLocPrfWeightPath
*>4.0.0.00.0.0.0032768i
*>22.0.0.0131.1.14.10100200i
*>33.0.0.0131.1.14.10100300i

Task2
ConfigureR2toblocknetwork1.1.4.0/24fromgettingintoitsroutingandBGPtables.
Usedistributelistandaccesslisttoaccomplishthistask.

OnR2
R2(config)#accesslist4deny 1.1.4.00.0.0.255
R2(config)#accesslist4permitany
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1distributelist4in
R2(configrouter)#neighbor131.1.23.3distributelist4in
Notethetrickypartwastounderstandthetopology,ifthetopologyinnot
understoodsillymistakescanoccurwhichcancostyoupoints.Thetrickypartof
thistaskistoblocktheprefixfrombothneighbors.

Task 3
Removetheconfigurationcommandfromprevioustask,andaccomplishthesametask
usingprefixlistanddistributelist.

OnR2
R2(config)#noaccesslist4
R2(config)#routerbgp200

www.ccieuniversity.com

R2(configrouter)#noneighbor131.1.12.1 distributelist1in
R2(configrouter)#noneighbor131.1.23.3 distributelist1in
R2(config)#ipprefixlistTESTseq5deny1.1.4.0/24
R2(config)#ipprefixlistTESTseq10permit0.0.0.0/0le32
R2(config)#routerbgp200
R2(configrouter)#neighbor131.1.12.1prefixlistTESTin
R2(configrouter)#neighbor131.1.23.3prefixlistTESTin
Notetherearemanywaystoaccomplishagiventask,understandingand
rememberingthedifferentwayscanbethekeytosuccess.

Task 4
ConfigureR3inAS300toblocknetwork22.0.0.0/8fromenteringitsroutingandBGP
table.DoNOTusedistributelistorprefixlist.Aroutemapandanaccesslistshouldbe
usedtoaccomplishthistask.Usingaroutemapandanaccesslistaccomplishthistaskin
anotherway.

OnR3
R3(config)#accesslist22deny22.0.0.0
R3(config)#accesslist22permitany
R3(config)#routemapTESTpermit10
R3(configroutemap)#matchipaddr22
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2routemapTESTin
R3(configrouter)#neighbor131.1.13.1routemapTESTin
Notethesametaskcanbeaccomplishedinanotherway:
R3(config)#accesslist22permit22.0.0.0
R3(config)#routemapTESTdeny10
R3(configroutemap)#matchipaddr22
R3(config)#routemapTESTpermit20
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2routemapTESTin

www.ccieuniversity.com

R3(configrouter)#neighbor131.1.13.1routemapTESTin

Task5
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.

www.ccieuniversity.com

Lab11
RegularExpressions

R1

R2
S0/0

S0/0
F0/0

FrameRelay

R3

R4

F0/0
S0/0S0/0
FrameRelay

LabSetup:
Configuretheroutersthatareconnectedtotheframerelaycloudsinapointto
pointmanner.
R2andR3sF0/0interfaceshouldbeconfiguredinVLAN23.

www.ccieuniversity.com

Ipaddressing:
Router Interface
R1
Lo0
FramerelayconnectiontoR2
R2
Lo0
FramerelayconnectiontoR1
R3

R4

Lo0
F0/0interfaceconnectiontoR2
FramerelayconnectiontoR4
Lo0
FramerelayconnectiontoR3

IPAddress
1.1.1.1/8
131.1.12.1/24
2.2.2.2/8
131.1.12.2/24
131.1.23.2/24
3.3.3.3/8
131.1.23.3/24
131.1.34.3/24
4.4.4.4/8
131.1.34.4/24

ASnumber
100
200

300

400

Task 1
ConfigureBGPontheroutersandONLYadvertisetheirLoopbackinterface/sinBGP.
EnsurethattheroutershaveNLRItoeveryadvertisedLoopbackinterfaceinthis
topology.
EnsurethattheroutersONLYadvertisetheirlinks(131.1.12.0/24,131.1.23.0/24,and
131.1.34.0/24)inRIPv2,disableautosummaryinRIPv2routingprotocol.

OnR1
R1(configif)#routerbgp100
R1(configrouter)#noau
R1(configrouter)#netw1.0.0.0
R1(configrouter)#neighbor131.1.12.2remoteas200
R1(configrouter)#routerrip
R1(configrouter)#noau
R1(configrouter)#ver2
R1(configrouter)#netw131.1.0.0

OnR2
R2(configif)#routerbgp200
R2(configrouter)#noau
R2(configrouter)#netw2.0.0.0
R2(configrouter)#neighbor131.1.12.1remoteas100
R2(configrouter)#neighbor131.1.23.3remoteas300
R2(configrouter)#routerrip
R2(configrouter)#noau

www.ccieuniversity.com

R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0

OnR3
R2(configif)#routerbgp300
R2(configrouter)#noau
R2(configrouter)#netw3.0.0.0
R2(configrouter)#neighbor131.1.34.4remoteas400
R2(configrouter)#neighbor131.1.23.2remoteas200
R2(configrouter)#routerrip
R2(configrouter)#noau
R2(configrouter)#ver2
R2(configrouter)#netw131.1.0.0

OnR4
R4(configif)#routerbgp400
R4(configrouter)#noau
R4(configrouter)#netw4.0.0.0
R4(configrouter)#neighbor131.1.34.3remote300
R4(configrouter)#routerrip
R4(configrouter)#noau
R4(configrouter)#ver2
R4(configrouter)#netw131.1.0.0

Toverifytheconfiguration:
OnR1
R1#Showipbgp
BGPtableversionis5,localrouterIDis1.1.1.1
Statuscodes:ssuppressed,ddamped,hhistory,*valid,>best,i internal,
rRIBfailure,SStale
Origincodes:i IGP,e EGP,? incomplete
NetworkNextHopMetricLocPrfWeightPath
*>1.0.0.00.0.0.0032768i
*>2.0.0.0131.1.12.200200i
*>3.0.0.0131.1.12.2
0200300i
*>4.0.0.0131.1.12.20200300400i

www.ccieuniversity.com

Task 2
ConfigureR1suchthatitblocksalltheprefixesthatoriginatedinAS300.

OnR1
R1(config)#ipaspathaccesslist1deny_300$
R1(config)#ipaspathaccesslist1permit.*
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2filterlist1in

Task 3
Removetheconfigurationcommand/sfromthepreviousLabbeforeproceedingtothe
nexttask.

OnR1
R1(config)#noipaspathaccesslist1
R1(config)#routerbgp100
R1(configrouter)#noneighbor131.1.12.2filterlist1in

Task5
ConfigureR1suchthattheyblockalltheprefixesthattraversedthroughAS300.

OnR1
R1(config)#ipaspathaccesslist1deny_300_
R1(config)#ipaspathaccesslist1permit.*
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2filterlist1in

Task6
RemovetheconfigurationcommandfromthepreviousLabbeforeproceedingtothenext
task.

www.ccieuniversity.com

OnR1
R1(config)#noipaspathaccesslist1
R1(config)#routerbgp100
R1(configrouter)#noneighbor131.1.12.2filterlist1in

Task7
ConfigureR3suchthatitdoesntadvertisetheprefixesthatoriginatedinitsownASto
anyofitsneighbors.

OnR3
R3(config)#ipaspathaccesslist1deny^$
R3(config)#ipaspathaccesslist1permit.*
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2filterlist1out
R3(configrouter)#neighbor131.1.34.4filterlist1out

Task8
RemovetheconfigurationcommandfromthepreviousLabbeforeproceedingtothenext
task.

OnR3
R3(config)#noipaspathaccesslist1deny^$
R3(config)#routerbgp300
R3(configrouter)#noneighbor131.1.23.2filterlist1out
R3(configrouter)#noneighbor131.1.34.4filterlist1 out

Task9
ConfigureR3suchthatitblocksalltheprefixesfromitsneighboringAS200.

www.ccieuniversity.com

OnR3
R3(config)#ipaspathaccesslist1deny^200$
R3(config)#ipaspathaccesslist1permit.*
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2filterlist1in

Task10
RemovetheconfigurationcommandfromthepreviousLabbeforeproceedingtothenext
task.

OnR3
R3(config)#noipaspathaccesslist1
R3(config)#routerbgp300
R3(configrouter)#noneighbor131.1.23.2filterlist1in

Task11
ConfigureR3suchthatitblocksalltheprefixesfromitsexistingandfuturedirectly
connectedneighbors.

OnR3
R3(config)#ipaspathaccesslist1deny^[09]+$
R3(config)#ipaspathaccesslist1permit.*
R3(config)#routerbgp300
R3(configrouter)#neighbor131.1.23.2filterlist1in
R3(configrouter)#neighbor131.1.34.4filterlist1in

Task12
RemovetheconfigurationcommandfromthepreviousLabbeforeproceedingtothenext
task.

www.ccieuniversity.com

OnR3
R3(config)#noipaspathaccesslist1
R3(config)#routerbgp300
R3(configrouter)#noneighbor131.1.23.2filterlist1in
R3(configrouter)#noneighbor131.1.34.4filterlist1in

Task13
ConfigureR1suchthatitblocksalltheprefixesthatoriginatedinAS300andtraversed
throughAS200.

OnR1
R1(config)#ipaspathaccesslist1deny_200_300$
R1(config)#ipaspathaccesslist1permit.*
R1(config)#routerbgp100
R1(configrouter)#neighbor131.1.12.2filterlist1in

Task14
Erasethestartupconfigandreloadtheroutersbeforeproceedingtothenextlab.