LAB1 Day1 Switching Answers

CCIE ROUTING & SWITCHING
Catalyst 3560
Answers
CCIE Routing and Switching Catalyst 3560 Lab Pae ! "# !$%
2007 Network Learning, Inc. All Rights reserved Unauthorized dulication is a violation o! "ederal Law.
R"&ter & Sw't() T" Sw't() ("nne(t'"n
SW-1 SW-2
R1
F0/0 F0/1
R2
F0/0 F0/1
R3
R3
F0/0 F0/1

R4

F0/0 F0/1

R5

F0/0 F0/1

R6
F0/0 F0/1

CCIE Routing and Switching Catalyst 3560 Lab Pae $ "# !$%
*0+!
*0+$
*0+3
*0+%
*0+5
*0+6
*0+!,
*0+$0

*0+!
*0+$
*0+3
*0+%
*0+5
*0+6
*0+!,
*0+$0

CCIE Routing and Switching Catalyst 3560 Lab Pae 3 "# !$%
Tas- !
Configure the first and the second switch to be in !" do#ain ca$$ed CC%&
.e#"re ass'n'n a /TP 0"1a'n na1e2 t)ere 1&st be a tr&n- establ's)e0 between
t)e tw" sw't()es s" t)e ("n#'&rat'"ns w'll be 3r"3aate0 t" t)e "t)er sw't()4
On b"t) sw't()es
Switch'Show interface trun(
Switch'
N"te t)e tw" 3560s sw't()es are ("nne(te0 w't) $ (r"ss "5er et)ernet (ables2 '# t)ese
sw't()es were 3550s2 t)e tw" 3"rts w"&l0 )a5e ne"t'ate0 an ISL tr&n-2 a(t&ally
t)ey w"&l0 s)"w &3 as 6n7'sl82 t)'s 's be(a&se by 0e#a&lt t)e 3"rts were ("n#'&re0
'n 0es'rable 1"0e4 W't) 3560 sw't()es2 t)e 3"rts are n"t 'n 0es'rable 1"0e2 a 6s)"w
r&n 'nt #0+!,8 w'll re5eal t)'s 'n#"r1at'"n2 an0 t)ere#"re2 t)e 3"rt+s 1&st be
("n#'&re0 stat'(ally t" tr&n- "r ne"t'ate a tr&n-4
On ."t) sw't()es9
Switch'Show cd) neighbors
Ca)abi$it* Codes+ R - Router, ! - !rans -ridge, - - Source Route -ridge
S - Switch, . - .ost, % - %/0", r - Re)eater, " - "hone
1e2ice %1 3oca$ %ntrfce .o$dt#e Ca)abi$it* "$atfor# "ort %1
Switch Fas 0/22 145 S % WS-C3560-2Fas 0/22
N"te t)e 6S)"w (03 ne')b"rs8 ("11an0 re5eals t)e 3"rts ("nne(t'n t)e tw"
sw't()es4
CCIE Routing and Switching Catalyst 3560 Lab Pae % "# !$%
Lab !
.as'( 3560 ("n#'&rat'"n I
On ."t) sw't()es9
Switch7config8'int range f0/16-20
Switch7config-if-range8'switch)ort trun( enca)su$ation is$
Switch7config-if-range8'switch)ort #ode trun(
T" 5er'#y t)e ("n#'&rat'"n9
On t)e #'rst sw't()es9
Switch'Show int trun(
"ort 0ode &nca)su$ation Status 9ati2e 2$an
Fa0/16 on is$ trun(ing 1

"ort $ans a$$owed on trun(
Fa0/16 1-4064
Fa0/20 1-4064

"ort $ans a$$owed and acti2e in #anage#ent do#ain
Fa0/16 1
Fa0/20 1

"ort $ans in s)anning tree forwarding state and not )runed
Fa0/16 1
Fa0/20 none

N"w t)at t)e tr&n- 's establ's)e0 between t)e tw" sw't()es2 y"& (an " "n w't) /TP
("n#'&rat'"n as #"ll"ws9
On t)e #'rst sw't()
Switch7config8'!" do#ain CC%&

.y 0e#a&lt t)e 3560 sw't()es are 1e1ber "# a 0"1a'n (alle0 NULL2 t)ere#"re2 a#ter
enter'n t)e ab"5e ("11an02 y"& w'll et t)e #"ll"w'n 1essae &nless t)e sw't()
was 1e1ber "# an"t)er 0"1a'n:
Changing !" do#ain na#e fro# 9:33 to CC%&
T)'s tas- ("&l0 als" be a(("13l's)e0 by enter'n t)e 6/LAN 0atabase8 as #"ll"ws9
Switch'$an database
Switch72$an8't) do#ain CC%&
Switch72$an8'&;it
W)en a ("11an0 's entere0 'n t)e /lan 0atabase2 y"& 1&st 3er#"r1 t)e 6e;'t8 "r
t)e 6a33ly8 ("11an0 #"r t)e ()anes t" ta-e e##e(t4
N"te t)e 0's3lay bel"w re5eals t)at /TP 3r"3aate0 t)e /TP 0"1a'n 'n#"r1at'"n t"
t)e se("n0 sw't()9
On t)e se("n0 sw't()9
Switch'Sh 2t) status
!" ersion + 2
Configuration Re2ision + 0
0a;i#u# 3<9s su))orted $oca$$* + 1005
9u#ber of e;isting 3<9s + 5
!" =)erating 0ode + Ser2er
!" 1o#ain 9a#e + CC%&
!" "runing 0ode + 1isab$ed
!" 2 0ode + 1isab$ed
!" !ra)s /eneration + 1isab$ed
015 digest + 0;54 0;C1 0;40 0;65 0;63 0;56 0;44 0;-1
Configuration $ast #odified b* 0>0>0>0 at 0-0-00 00+00+00
3oca$ u)dater %1 is 0>0>0>0 7no 2a$id interface found8
Tas- $
!his !" do#ain shou$d be )assword )rotected using ?Cisco@ as the )assword>
On b"t) sw't()es
Switch7config8'2t) )assword Cisco

<"& s)"&l0 et t)e #"ll"w'n 1essae9
Setting de2ice 3<9 database )assword to Cisco
N"te2 '# a 0"1a'n na1e 's n"t ass'ne0 t" t)e sw't()es an0 t)e 0e#a&lt na1e "#
6NULL8 's &se02 a 3assw"r0 (an n"t be ass'ne04
T)'s 6/TP 3assw"r08 ("11an0 (an be entere0 'n l"bal ("n#'&rat'"n 1"0e2
3r'5'lee ("n#'&rat'"n 1"0e "r 'n t)e /LAN 0atabase 1"0e4

T)e 3assw"r0 ("11an0 1&st be ("n#'&re0 stat'(ally "n b"t) sw't()es be(a&se t)'s
()ane w'll NOT et 3r"3aate0 5'a /TP 1essaes4
On t)e *'rst sw't()
Switch' Show 2t) status
!" ersion + 2
0a;i#u# 3<9s su))orted $oca$$* + 1005
!" =)erating 0ode + Ser2er T)e 1"0e 's ser5er by 0e#a&lt
!" 1o#ain 9a#e + CC%& T)e 0"1a'n na1e
015 digest + 0;14 0;41 0;15 0;06 0;1C 0;36 0;65 0;C2

/TP 3assw"r0 (an be ()ane0 'n t)ree ways9
"ri2i$ege #ode+
Switch'2t) )assword Cisco
$an 1atabase+
$an database
t) )assword Cisco
&;it
/$oba$ config #ode+
Switch7config8'2t) )assword Cisco
On t)e Se("n0 sw't()
Switch'Show 2t) status
!" ersion + 2
0a;i#u# 3<9s su))orted $oca$$* + 1005
!" =)erating 0ode + Ser2er T)e 1"0e 's ser5er by 0e#a&lt
!" 1o#ain 9a#e + CC%& T)e 0"1a'n na1e
CCIE Routing and Switching Catalyst 3560 Lab Pae = "# !$%
015 digest + 0;54 0;C1 0;40 0;65 0;63 0;56 0;44 0;-1
On any "# t)e sw't()es9
Switch'Show !" )assword T)'s 5er'#'es t)e 3assw"r02 re1e1ber
S3a(es w'll n"t s)"w
/TP Passw"r09 C's("

Tas- 3
!he first Cata$*st switch shou$d be configured with a hostna#e of Cat-1 and the second
Cata$*st shou$d ha2e a hostna#e of Cat-2>
On t)e #'rst Sw't()
Switch7config8'.ostna#e Cat-1
On t)e Se("n0 Sw't()
Tas- %
Cat-2 shou$d 9=! ha2e the abi$it* to create, de$ete or rena#e 3<9 or 3<9
infor#ation>
On Cat7$
Cat-27config8't) #ode c$ient
T)'s ("n#'&rat'"n (an be 3er#"r1e0 'n t)e 5lan 0atabase "r l"bal ("n#' 1"0e4
T)e ab"5e ("11an0 0's3lays t)e ("11an0 as 't was entere0 'n t)e l"bal ("n#'
CCIE Routing and Switching Catalyst 3560 Lab Pae > "# !$%
1"0e4 I# y"& are as-e0 t" enter t)e ("11an0 'n t)e 5lan 0atabase2 y"& 1&st #'rst
enter t)e 65t3 0atabase8 ("11an0 'n t)e 3r'5'lee 1"0e2 t)en enter 65t3 (l'ent8
an0 lastly t)e 6e;'t8 ("11an0 1&st be &se0 #"r t)e ()anes t" ta-e e##e(t>
On(e t)e ("11an0 's entere0 y"& s)"&l0 et t)e #"ll"w'n 1essae9
Setting de2ice to !" C3%&9! #ode>
T)e sw't()es (an "3erate 'n t)ree 1"0es an0 t)ey are as #"ll"ws9
SER/ER ? T)e sw't() 's able t" 0elete2 (reate2 "r rena1e /LAN
'n#"r1at'"n4 Catalyst 3560 'n ser5er 1"0e 3art'('3ates 'n t)e /TP
0"1a'n an0 3r"3aates t)e /LAN 'n#"r1at'"n4
CLIENT ? In t)'s 1"0e t)e sw't() 's able t" re(e'5e an0 3r"(ess t)e
/TP 1essaes2 b&t t)ey are n"t able t" (reate2 0elete2 "r rena1e
/LAN 'n#"r1at'"n4 T)ey (an ass'n a 3"rt t" a '5en /LAN t)at
alrea0y e;'sts4 Catalyst 3560 'n (l'ent 1"0e 3art'('3ates 'n t)e /TP
0"1a'n an0 3r"3aates t)e /TP 1essaes4
Trans3arent ? In t)'s 1"0e t)e sw't() 's able t" (reate2 0elete an0
1"0'#y t)e /LAN 'n#"r1at'"n b&t 't w'll n"t 3r"3aate 'ts /LAN
'n#"r1at'"n t" "t)er sw't()es4 Catalyst 3560 sw't()es 'n t)'s 1"0e 0"
NOT 3art'('3ate 'n /TP 0"1a'n4 A Catalyst 3560 sw't() 1&st be 'n
t)'s 1"0e 'n "r0er t" (reate t)e e;ten0e07rane /LANs @!006 ? %0,%A2
t)'s ("n#'&rat'"n (an "nly be 3er#"r1e0 'n t)e l"bal ("n#' 1"0e
an0 NOT 'n t)e /lan 0atabase4 W)en t)e sw't() 's 'n t)'s 1"0e t)e
/LAN 'n#"r1at'"n 's 3art "# t)e r&nn'n "r start&3 ("n#'&rat'"n2 t)e
/LAN 'n#"r1at'"n 's NOT -e3t 'n t)e /LAN 0atabase @5lan40atA4
Tas- 5
Create and configure the fo$$owing 3<9 assign#ents on Cat-1 and Cat-2+
Router %nterface 3<9 nu#ber C<! Switches "ort
R! ? *0+0 !$ SW! ? *0+!
R$ ? *0+0 !$ SW! ? *0+$
R3 ? *0+0 3% SW! ? *0+3
R% ? *0+0 3% SW! ? *0+%
R5 ? *0+0 56 SW! ? *0+5
R6 ? *0+0 56 SW! ? *0+6
On Cat7!
CCIE Routing and Switching Catalyst 3560 Lab Pae , "# !$%
Cat-17config8'interface range f0/1 - 2
Cat-17config-if8'switch #ode access
Cat-17config-if8'switch access 2$an 12


Cat-17config8'interface range F0/5 - 6
Cat-17config-if8'&nd
N"te t)e /lan 'n#"r1at'"n w'll be 3r"3aate0 t" t)e "t)er sw't() @Cat7$A2 be(a&se
b"t) sw't()es are 'n t)e sa1e /TP 0"1a'n an0 t)ey are b"t) ("n#'&re0 w't) t)e
sa1e 3assw"r0>
On Cat7$
Cat-2'Show 2$an brie
3<9 9a#e Status "orts
---- -------------------------------- --------- -------------------------------
1 defau$t acti2e Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/4, Fa0/5
Fa0/6, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/14, Fa0/15, Fa0/23, Fa0/24
/i0/1, /i0/2
12 3<90012 acti2e
34 3<90034 acti2e
56 3<90056 acti2e
#he rest o! the outut is o$itted
Cat-2'Show !" Status
!" ersion + 2
0a;i#u# 3<9s su))orted $oca$$* + 1005
!" =)erating 0ode + C$ient
!" 1o#ain 9a#e + CC%&
CCIE Routing and Switching Catalyst 3560 Lab Pae !0 "# !$%
015 digest + 0;64 0;61 0;F1 0;F6 0;F& 0;21 0;CC 0;11
On Cat7!
Cat-1'Show !" Status
!" ersion + 2
0a;i#u# 3<9s su))orted $oca$$* + 1005
!" 1o#ain 9a#e + CC%&
015 digest + 0;64 0;61 0;F1 0;F6 0;F& 0;21 0;CC 0;11
N"te2 /TP 5ers'"n 's $2 C"n#'&rat'"n re5's'"n 's 32 n&1ber "# e;'st'n /LANs 's >
"n b"t) sw't()es2 @be(a&se t)ey are syn()r"n'Be0A2 an0 t)e reas"n t)e /LAN
'n#"r1at'"n was 3r"3aate0 's be(a&se t)e /TP 0"1a'n na1e an0 t)e 3assw"r0 's
'0ent'(al "n b"t) sw't()es an0 t)e sw't()es are tr&n-e0>
Tas- 6
Create 3oo)bac(0 interface on Cat-1, use the %" address of 1>1>1>1 /5 and ensure that this
interfaceAs %" address is used as the )referred source for the !" %" u)dater address>
N"te 'n t)e last Tas- w)en t)e 6s)"w 5t3 stat&s8 ("11an0 was entere0 "n Cat7!2
t)e last l'ne "# t)e "&t3&t 0's3laye0 6n" 5al'0 'nter#a(e #"&n084
Cat7! (an be ("n#'&re0 s&() t)at t)e IP a00ress "# any "# 'tCs 'nter#a(es 'n t)'s (ase
L""3ba(-0 's &se0 as t)e s"&r(e "# all /TP 1essaes2 as #"ll"ws9
On Cat7!
Cat-17config8' %nterface 3oo)bac( 0
Cat-17config-if8' %) address 1>1>1>1 255>0>0>0
CCIE Routing and Switching Catalyst 3560 Lab Pae !! "# !$%
Cat-17config-if8' &;it
Cat-17config8' t) interface 3oo)bac(0

Cat-1'Show 2t) status
!" ersion + 2
0a;i#u# 3<9s su))orted $oca$$* + 1005
!" 1o#ain 9a#e + CC%&
015 digest + 0;64 0;61 0;F1 0;F6 0;F& 0;21 0;CC 0;11
L"(al &30ater ID 's !4!4!4! "n 'nter#a(e L"0 @3re#erre0 'nter#a(eA
Pre#erre0 'nter#a(e na1e 's l"0
On Cat7$
!" ersion + 2
0a;i#u# 3<9s su))orted $oca$$* + 1005
!" 1o#ain 9a#e + CC%&
015 digest + 0;64 0;61 0;F1 0;F6 0;F& 0;21 0;CC 0;11
C"n#'&rat'"n last 1"0'#'e0 by 0404040 at 37!7,3 009$$9$,
Create a /LAN @/LAN >0A "n Cat7! s" y"& (an see t)at t)e ()ane was 1a0e by t)e
L""3ba(- 0 'nter#a(e "# !4!4!4! "n Cat7$4 T)'s /LAN s)"&l0 be 0elete0 be#"re
3r"(ee0'n t" t)e ne;t tas-4
On Cat7!
Cat-17config8'$an 50
Cat-17config-2$an8'&;it
CCIE Routing and Switching Catalyst 3560 Lab Pae !$ "# !$%
On Cat7$
!" ersion + 2
0a;i#u# 3<9s su))orted $oca$$* + 1005
!" 1o#ain 9a#e + CC%&
015 digest + 0;02 0;05 0;62 0;34 0;F0 0;C0 0;35 0;61
C"n#'&rat'"n last 1"0'#'e0 by !4!4!4! at 37!7,3 0093%933
On Cat7!
Cat-17config8'9o 2$an 50
Tas- =
Configure a trun( between the two switches using )orts F0/16 and F0/20> 9one of these
switches shou$d use 1!" to negotiate the trun(>

On ."t) Sw't()es
7config8'%nterface range F0/16B20
7config-if-range8' Switch)ort #ode trun(
7config-if-range8'Switch)ort nonegotiate
N"te t)e 3"rts 1&st be 'n tr&n- 1"0e be#"re t)e 6n"ne"t'ate8 ("11an0 's entere02
"t)erw'se y"& w'll re(e'5e t)e #"ll"w'n err"r 1essae9
Co##and reCected+ Conf$ict between DnonegotiateA and Dd*na#icA status>

A 3"rt (an be ("n#'&re0 as #"ll"ws9
Stat'( A((ess ? T)'s 3"rt (an bel"n t" ONL< "ne /LAN2 an0 'tCs 1an&ally ass'ne0
t" a '5en /LAN4
Tr&n- B A tr&n- 3"rt by 0e#a&lt 's 1e1ber "# all n"r1al rane /LANs !7!005 @b&t
n"te t)at /LANs !2 !00$ ? !005 are a&t"1at'(ally (reate0 an0 (an n"t be re1"5e02
"nly $ t" !00! (an be 1an&ally (reate02 t)ese /LANs are -e3t 'n t)e /LAN4DATA4
T)'s als" 'n(l&0es t)e e;ten0e07rane /LANs @!006 7 %0,%A2 an0 t)'s 1e1bers)'3
(an be l'1'te0 by ("n#'&r'n t)e 6all"we075lan8 ("11an04 T)'s 3"rt (an be
en(a3s&late0 by ISL "r tae0 by >0$4!E4
Dyna1'( A((ess B A 0yna1'( a((ess 3"rt (an "nly be a 1e1ber "# "ne n"r1al
/LAN2 an0 t)ese 3"rts are 0yna1'(ally ass'ne0 t" a '5en /LAN by a /FPS4
/"'(e /LAN ? T)'s 's an a((ess 3"rt ("nne(te0 t" an IP 3)"ne s&() as C's("Cs =,602
an0 t)'s /LAN 's &se0 #"r /"'(e tra##'(4
D"t!E7T&nnel ? T)ese are t&nnel 3"rts an0 are &se0 #"r >0$4!E t&nnel'n t"
1a'nta'n (&st"1er /LAN 'nter'ty a(r"ss a ser5'(e 3r"5'0erCs netw"r-4 A t&nnel
3"rt 's ("n#'&re0 "n an e0e sw't() 'n t)e ser5'(e 3r"5'0erCs netw"r- an0 'tCs
("nne(te0 t" an >0$4!E tr&n- 3"rt "n a (&st"1er sw't()Cs 'nter#a(e2 a t&nnel 3"rt
bel"ns t" a s'nle /LAN t)at 's 0e0'(ate0 t" t&nnel'n4
Tas- >
Configure the switches such that f$ooded traffic is restricted to the trun( $in(s that the
traffic #ust use to reach the destination de2ice>
On Cat7$
!" ersion + 2
0a;i#u# 3<9s su))orted $oca$$* + 1005
!" 1o#ain 9a#e + CC%&
/TP Pr&n'n F"0e 9 D'sable0
!" 2 0ode + 1isab$ed Pr&n'n 's 0'sable0
015 digest + 0;64 0;61 0;F1 0;F6 0;F& 0;21 0;CC 0;11
CCIE Routing and Switching Catalyst 3560 Lab Pae !% "# !$%
N"te /TP Pr&n'n 's 0'sable0 by 0e#a&lt
On Cat7!
Cat-1't) )runing
T)'s ("11an0 (an be ("n#'&re0 'n 3r'5'lee 1"0e2 Gl"bal ("n#' 1"0e2 an0+"r 'n
t)e /lan 0atabase4 On(e t)'s #eat&re 's enable0 't w'll et 3r"3aate0 t" t)e "t)er
sw't()es w't)'n t)e /TP 0"1a'n4
T" 5er'#y t)e ("n#'&rat'"n "n b"t) sw't()es9
On Cat7$
!" ersion + 2
0a;i#u# 3<9s su))orted $oca$$* + 1005
!" 1o#ain 9a#e + CC%&
/TP Pr&n'n F"0e 9 Enable0
015 digest + 0;64 0;61 0;F1 0;F6 0;F& 0;21 0;CC 0;11
N"te /TP 1essaes 3r"3aate t)e ()ane t)r"&) t)e ent're /TP 0"1a'n4
Tas- ,
Configure Cat-1 and Cat-2 such that on$* the trun( )orts 7F0/16 and F0/208 and the )orts
that routers R1 to R6 are connected to are in use, the rest of the )orts shou$d be
configured in ad#inistrati2e$* down state>
On ."t) Sw't()es9
Cat-17config8'%nt range f0/4-15,F0/21-24
Cat-17config-if-range8'Shut
Tas- !0
&nsure that Cat-1 is the root bridge for the 3<9s 12, 34 and Cat-2 is the root bridge for
3<9 56> 1o 9=! use the ?)riorit*@ co##and to acco#)$ish this tas(>
T)ere are t)ree ("11an0s t)at (an be &se0 t" 0's3lay t)e .ID #"r a '5en sw't()9
S)"w 5ers'"n
S)"w s3ann'n7tree br'0e
S)"w 'nter#a(e /lan !
On Cat7!
Cat-1'Show 2ersion
Cat-1'Show 2er
Cisco %=S Software, C3560 Software 7C3560-<1%"S&R%C&SE6-08, ersion 12>27258S&&2,
R&3&<S& S=F!W<R& 7fc18
Co)*right 7c8 1656-2006 b* Cisco S*ste#s, %nc>
Co#)i$ed Fri 25-Fu$-06 12+34 b* *enanh
%#age te;t-base+ 0;00003000, data-base+ 0;01223410
R=0+ -ootstra) )rogra# is C3560 boot $oader
-==!31R+ C3560 -oot 3oader 7C3560-.-==!-08 ersion 12>2725r8S&C, R&3&<S&
S=F!W<R& 7fc48
Cat-1 u)ti#e is 45 #inutes
S*ste# returned to R=0 b* )ower-on
S*ste# i#age fi$e is Gf$ash+/c3560-ad2i)ser2ices(6-#H>122-25>S&&2>binG
!his )roduct contains cr*)togra)hic features and is subCect to :nited
States and $oca$ countr* $aws go2erning i#)ort, e;)ort, transfer and
use> 1e$i2er* of Cisco cr*)togra)hic )roducts does not i#)$*
third-)art* authorit* to i#)ort, e;)ort, distribute or use encr*)tion>
%#)orters, e;)orters, distributors and users are res)onsib$e for
co#)$iance with :>S> and $oca$ countr* $aws> -* using this )roduct *ou
agree to co#)$* with a))$icab$e $aws and regu$ations> %f *ou are unab$e
to co#)$* with :>S> and $oca$ $aws, return this )roduct i##ediate$*>
< su##ar* of :>S> $aws go2erning Cisco cr*)togra)hic )roducts #a* be found at+
htt)+//www>cisco>co#/ww$/e;)ort/cr*)to/too$/stIrg>ht#$
%f *ou reIuire further assistance )$ease contact us b* sending e#ai$ to
e;)ortJcisco>co#>
cisco WS-C3560-24!S 7"ower"C4058 )rocessor 7re2ision 108 with 115454E/12250E b*tes of
#e#or*>
"rocessor board %1 C<!1030K.4&
3ast reset fro# )ower-on
1 irtua$ &thernet interface
24 Fast&thernet interfaces
2 /igabit &thernet interfaces
!he )assword-reco2er* #echanis# is disab$ed>
512E b*tes of f$ash-si#u$ated non-2o$ati$e configuration #e#or*>
.ase et)ernet FAC A00ress 9 009!,9069=*9>,900
0otherboard asse#b$* nu#ber + 43-6564-06
"ower su))$* )art nu#ber + 341-0064-02
0otherboard seria$ nu#ber + C<!102640.&
"ower su))$* seria$ nu#ber + <KS1025050
0ode$ re2ision nu#ber + 10
#he rest o! the outut is o$itted T)e base FAC
T)e #"ll"w'n ("11an0 re5eals t)e base FAC a00ress "# t)e sw't()2 t)e ("1b'nat'"n "#
3r'"r'ty an0 t)e base FAC a00ress 's t)e .ID #"r a '5en sw't()4
Cat-1'Show s)anning-tree bridge
.e$$o 0a; Fwd
$an -ridge %1 !i#e <ge 1$* "rotoco$
---------------- ------------------------------------------ ----- ------- --- --------
3<90001 3$=6, 732465, 18 00!,406=#4>,00 2 20 15 ieee
3<90012 3$=>0 732465, 128 00!,406=#4>,00 2 20 15 ieee
3<90034 3$>0$ 732465, 348 00!,406=#4>,00 2 20 15 ieee
3<90056 3$>$% 732465, 568 00!,406=#4>,00 2 20 15 ieee

N"te t)e 3r'"r'ty starts w't) 3$=6>2 ea() /LAN t)at 's (reate0 a00s 'tCs /LAN n&1ber t"
t)e 0e#a&lt 3r'"r'ty 5al&e @I# t)e base 3r'"r'ty an0 t)e /LAN n&1ber 's a00e0 w't)'n t)e
3arent)es's2 t)e s&1 w'll be t)e 3r'"r'ty #"r t)at '5en /LANA2 /LAN !$ a00s !$ t" t)e
0e#a&lt 3r'"r'ty 5al&e t)ere#"re t)e 3r'"r'ty 's 3$=>0 an0 /LAN 3% a00s 3% t" t)e 0e#a&lt
3r'"r'ty 5al&e2 t)ere#"re2 t)e 3r'"r'ty 's 3$>0$4 N"te t)at t)e FAC 's t)e base FAC a00ress
an0 't re1a'ns t)e sa1e2 'n t)'s (ase @00!,406=#4>,00A4
N"te y"&r FAC a00ress 1aybe 0'##erent4
Cat-1'Show int $an 1
$an1 is u), $ine )rotoco$ is u)

.ardware is &therS%, address is 00!,406=#4>,%0 @b'a 00!,406=#4>,%0A
0!: 1500 b*tes, -W 1000000 Ebit, 13L 10 usec,
CCIE Routing and Switching Catalyst 3560 Lab Pae != "# !$%
re$iabi$it* 255/255, t;$oad 1/255, r;$oad 1/255
T)e "&t3&t "# t)e ab"5e ("11an0 w'll re5eal t)e b'a "r t)e FAC a00ress "# /LAN !
'nter#a(e w)'() 's als" t)e base FAC a00ress "# t)e sw't()
T" #'n0 "&t t)e .ID an0 t)e r""t br'0e #"r a '5en /LAN2 enter t)e #"ll"w'n S)"w
("11an09
On Cat7!
Cat-1'Show s)anning-tree 2$an 12
3<90012
S)anning tree enab$ed )rotoco$ ieee T)e FAC a00ress "# t)e r""t br'0e
Root %1 "riorit* 32450
A00ress 00!>4b,>,4>$>0
Cost 16
"ort 21 7Fast&thernet0/168
.e$$o !i#e 2 sec 0a; <ge 20 sec Forward 1e$a* 15 sec
-ridge %1 "riorit* 32450 7)riorit* 32465 s*s-id-e;t 128
A00ress 00!,406=#4>,00
<ging !i#e 300
T)e Fa( a00ress "# t)e l"(al sw't()
%nterface Ro$e Sts Cost "rio>9br !*)e
---------------- ------ ------ --------- ---------- --------------------------------
Fa0/16 Root FW1 16 125>21 "2)
Fa0/20 <$tn -3E 16 125>22 "2)
Enter t)e #"ll"w'n ("11an0s t" ("n#'&re Cat7! t" be t)e r""t br'0e #"r /LANs !$ an0
3%9
On Cat7!
Cat-17config8'S)anning-tree 2$an 12,34 root )ri#ar*
T)e ab"5e ("11an0 ("n#'&res Cat7! t" be t)e r""t #"r /LANs !$ an0 3%: t)e 6r""t8
-eyw"r0 's a 1a(r" t)at re0&(es t)e .ID "# t)e sw't() #"r a '5en /LAN by a 5al&e "# >!,$
@T)e l"wer 5al&e 's t)e 3re#erre0 5al&eA> T)ere are n" s3a(es between t)e !$ an0 t)e ("11a
an0 t)e 3%4
CCIE Routing and Switching Catalyst 3560 Lab Pae !> "# !$%
3<90012 N"te 3$=6>G!$7>!,$ H $%5>>
S)anning tree enab$ed )rotoco$ ieee
Root %1 Pr'"r'ty $%5>>
A00ress 00!,406=#4>,00
T)'s br'0e 's t)e r""t
-ridge %1 Pr'"r'ty $%5>> 7)riorit* 24546 s*s-id-e;t 128
A00ress 00!,406=#4>,00
<ging !i#e 300
---------------- ---- --- --------- -------- --------------------------------
Fa0/16 1esg FW1 16 125>21 "2)
Fa0/20 1esg FW1 16 125>22 "2)
On Cat7$
Cat-27config8''S)anning-tree 2$an 56 root )ri#ar*
Cat7$
Cat-2'Show s)anning 2$an 56
3<90056
S)anning tree enab$ed )rotoco$ ieee
Root %1 Pr'"r'ty $%63$
A00ress 00!>4b,>,4>$>0
T)'s br'0e 's t)e r""t
-ridge %1 Pr'"r'ty $%63$ 7)riorit* 24546 s*s-id-e;t 568
A00ress 00!>4b,>,4>$>0
<ging !i#e 300
---------------- ---- --- --------- -------- --------------------------------
Fa0/16 1esg FW1 16 125>21 "2)
Fa0/20 1esg FW1 16 125>22 "2)
CCIE Routing and Switching Catalyst 3560 Lab Pae !, "# !$%
Tas- !!
Configure Cat-1 such that the )orts that the routers are connected to b*)ass $istening and
$earning state> %f an* of these )orts recei2e -"1: )ac(ets, the* shou$d transition into
errdisab$e state> :se #ini#u# nu#ber of co##ands to acco#)$ish this tas(> !his
configuration shou$d on$* be a))$ied to the )orts that the routers R1 - R6 are connected
to>
On Cat7!
Cat-17config8'S)anning-tree )ortfast b)duguard defau$t
Cat-17config8'%nterface range F0/1 - 6
Cat-17config-if8'S)anning-tree )ortfast
On(e t)e 3"rt#ast ("11an0 's entere0 y"& s)"&l0 see t)e #"ll"w'n warn'n
1essae9
MWarning+ )ortfast shou$d on$* be enab$ed on )orts connected to a sing$e
host> Connecting hubs, concentrators, switches, bridges, etc>>> to this
%nterface when )ortfast is enab$ed, can cause te#)orar* bridging $oo)s>
:se with C<:!%=9
MP"rt#ast w'll be ("n#'&re0 'n 6 'nter#a(es due to the range co##and
but wi$$ on$* ha2e effect when the interfaces are in a non-trun(ing #ode>
T)e 6s3ann'n7tree 3"rt#ast b30&&ar0 0e#a&lt8 ("11an0 'n l"bal ("n#' 1"0e
w'll s)&t t)e 3"rt 0"wn 'n err70'sable 1"0e '# any 3"rt#ast enable0 3"rt re(e'5es
.PDU 3a(-ets4
Tas- !$
Configure Cat-2 such that the )orts that the routers are connected to 7F0/1 - F0/68 b*)ass
$istening and $earning state> %f an* of these )orts recei2e -"1: )ac(ets, the* shou$d
$oose their )ortfast state> !his configuration shou$d a))$* to e;isting and future )orts that
are configured as )ortfast>
On Cat7$
Cat-27config8'S)anning-tree )ortfast b)dufi$ter defau$t
CCIE Routing and Switching Catalyst 3560 Lab Pae $0 "# !$%
Cat-27config8'%nterface range F0/1 - 6
Cat-27config-if8'S)anning-tree )ortfast
On(e t)e 3"rt#ast ("11an0 's entere0 y"& s)"&l0 see t)e #"ll"w'n warn'n
1essae9
MWarning+ )ortfast shou$d on$* be enab$ed on )orts connected to a sing$e
host> Connecting hubs, concentrators, switches, bridges, etc>>> to this
%nterface when )ortfast is enab$ed, can cause te#)orar* bridging $oo)s>
:se with C<:!%=9
MP"rt#ast w'll be ("n#'&re0 'n 6 'nter#a(es due to the range co##and
but wi$$ on$* ha2e effect when the interfaces are in a non-trun(ing #ode>
<t the g$oba$ $e2e$, *ou can enab$e -"1: fi$tering on "ort Fast-enab$ed interfaces b*
using the ?s3ann'n7tree 3"rt#ast b30&#'lter 0e#a&lt8 g$oba$ configuration co##and>
Tas- !3
Lou recei2ed a reIuest fro# the %! de)art#ent to #onitor and ana$*He a$$ the )ac(ets sent
and recei2ed b* the host connected to )ort F0/14 on Cat-1N *ou ha2e connected the
)ac(et ana$*Her to )ort F0/15 on the sa#e switch> Configure the switch to acco##odate
this reIuest>
On Cat7!
Cat-17config8'#onitor session 1 source interface F0/14 both
Cat-17config8'#onitor session 1 destination interface F0/15
N"te t)e #"ll"w'n9
T)ere (an "nly be tw" 1"n't"r sess'"ns ("n#'&re0 "n a '5en sw't()
T)e'r 0're(t'"n t" 1"n't"r (an be ("n#'&re0 as R;2 T;2 "r ."t)4 R; 's
#"r re(e'5e0 tra##'(2 T; 's #"r Trans1'tte0 tra##'(2 an0 b"t) 's 'n b"t)
0're(t'"n4
/LANs (an ONL< be ("n#'&re0 'n R; 0're(t'"n4
T" 5er'#y Enter t)e 6S)"w 1"n't"r sess'"n !8 ("11an04
On Cat7!
CCIE Routing and Switching Catalyst 3560 Lab Pae $! "# !$%
Cat-1'Show #onitor session 1
Session 1
---------
!*)e + 3oca$ Session
Source "orts +
-oth + Fa0/14
1estination "orts + Fa0/15
&nca)su$ation + 9ati2e
%ngress + 1isab$ed
Tas- !%
Lou recei2ed another reIuest fro# *our %! de)art#ent to (ee) trac( of a$$ the 0<C
addresses that are $earned b* Cat-2 )ort F0/15> !he switch #ust use the 90S $ocated at
162>165>1>1 /24, configure the switch to hand$e this reIuest> Lou shou$d use an %" address
of 2>2>2>2 /5 to acco#)$ish this tas(>
On Cat7$
Cat-27config8'Sn#)-ser2er host 162>165>1>1 tra) )ri2ate
IIPJSNFP737SOCKET9 (anLt "3en UDP s"(-et
Unable t" "3en s"(-et "n 3"rt !6!
N"te s'n(e t)'s sw't() 's n"t ("n#'&re0 w't) an IP a00ress2 't w'll #a'l t" ("n#'&re
t)e Sn13 ser5er4 T)ere#"re2 an IP a00ress s)"&l0 be ("n#'&re0 be#"re enter'n t)e
6sn137ser5er8 ("11an0 as #"ll"ws9

Cat-27config8'%nt $o0
Cat-27config-if8'%) addr 2>2>2>2 255>0>0>0

Cat-27config8'sn#)-ser2er host 162>165>1>1 )ri2ate
@T" set&3 t)e Sn137Ser5erA
Cat-27config8'sn#)-ser2er enab$e tra)s #ac-notification
@C"n#'&res t)e sw't() t" sen0 1a(7a00ress tra3s t" t)e NFSA
Cat-27config8'#ac-address-tab$e notification
@T" enable FAC7a00ress n"t'#'(at'"nA
Cat-27config8'%nter f0/15
Cat-27config-if8'sn#) tra) #ac-notification added
@T)e ab"5e ("11an0 enables t)e SNFP tra3 "n 'nter#a(e *0+!> an0 ("n#'&res t)e
sw't() t" sen0 FAC n"t'#'(at'"n tra3s w)ene5er a FAC7a00ress 's a00e04 I# t)e
sw't() 1&st be ("n#'&re0 t" re3"rt t)e FAC a00resses t)at are learnt an0 e;3're02
CCIE Routing and Switching Catalyst 3560 Lab Pae $$ "# !$%
t)en 6sn13 tra3 1a(7n"t'#'(at'"n re1"5e08 ("11an0 1&st als" be ("n#'&re0A4
Cat-2'Show #ac-address-tab$e notification interface f0/15
0<C 9otification Feature is Enable0 on the switch
%nterface 0<C <dded !ra) 0<C Re#o2ed !ra)
--------- -------------- ----------------
Fast&thernet0/15 Enable0 1isab$ed
N"te '# t)e 6sn13 tra3 1a(7n"t'#'(at'"n re1"5e08 ("11an0 was als" entere0 #"r
*0+!, 'nter#a(e2 &n0er t)e 6FAC re1"5e0 Tra38 ("l&1n y"& w'll als" see as
6Enable084

Cat-2'Show #ac-address-tab$e notification
FAC N"t'#'(at'"n *eat&re 's Enable0 "n t)e sw't()
Inter5al between N"t'#'(at'"n Tra3s 9 ! se(s
N&1ber "# FAC A00resses A00e0 9 0
N&1ber "# FAC A00resses Re1"5e0 9 0
N&1ber "# N"t'#'(at'"ns sent t" NFS 9 0
Fa;'1&1 N&1ber "# entr'es ("n#'&re0 'n H'st"ry Table 9 !
C&rrent H'st"ry Table Lent) 9 0
FAC N"t'#'(at'"n Tra3s are Enable0
H'st"ry Table ("ntents
7777777777777777777777
Tas- !5
=n Cat-2 )ort F0/14 configure the a#ount of bandwidth uti$iHation for broadcast traffic
to 50M>
On Cat7$
Cat-27config8'%nterface F0/14
Cat-27config-if8'Stor#-contro$ broadcast $e2e$ 50>00
St"r17("ntr"l (an be &se0 #"r .r"a0(ast2 Un'(ast an0 F&lt'(ast tra##'(2 t)'s
("11an0 s3e('#'es tra##'( s&33ress'"n le5el #"r a '5en ty3e "# tra##'( #"r a
3art'(&lar 'nter#a(e4 T)e le5el (an be #r"1 0 t" !00 an0 an "3t'"nal #ra(t'"n "# a
le5el (an als" be ("n#'&re0 #r"1 0 ? ,,4 A t)res)"l0 5al&e "# !00 3er(ent 1eans t)at
n" l'1't 's 3la(e0 #"r t)e s3e('#'e0 ty3e "# tra##'(: a 5al&e "# 040 1eans t)at t)e
3art'(&lar ty3e "# tra##'( 's bl"(-e0 all t"et)er4
W)en t)e rate "# F&lt'(ast tra##'( e;(ee0s a 3re0e#'ne0 t)res)"l02 all 'n("1'n
tra##'( @.r"a0(ast2 F&lt'(ast an0 Un'(astA 's 0r"33e0 &nt'l t)e le5el "# F&lt'(ast
tra##'( 's 0r"33e0 bel"w t)e t)res)"l0 le5el4 On(e t)'s "((&rs2 "nly t)e S3ann'n7tree
3a(-ets are #"rwar0e04 W)en .r"a0(ast "r Un'(ast t)res)"l0s are e;(ee0e02 tra##'(
's bl"(-e0 #"r "nly t)e ty3e "# tra##'( t)at e;(ee0e0 t)e t)res)"l04
Cat-2'Show stor#-contro$ f0/14 broadcast
%nterface Fi$ter State :))er 3ower Current
--------- ------------- ----------- ----------- -----------
Fa0/14 Forwarding 50>00M 50>00M 0>00M
Tas- !6
0ac addresses $earnt d*na#ica$$* b* these two switches shou$d not sta* in the 0<C
address tab$e if the* are inacti2e for $onger than 10 #inutes>
.y 0e#a&lt t)e FAC a00resses t)at are 'na(t'5e w'll e;3're w't)'n 300 se("n0s2 t)'s
tas- 's as-'n #"r a !0 1'n&tes t)res)"l02 !0 1'n&tes eE&ates t" 600 se("n0s2 t)e
#"ll"w'n ("11an0 w'll a(("13l's) t)'s tas-9
On Cat7! an0 Cat7$
7config8'0ac-address-tab$e aging-ti#e 600
Tas- !=
For #anage#ent )ur)oses, assign an %" address of 10>1>1>11 /24 to Cat-1, with a defau$t
gatewa* of 10>1>1>2 /24>
On Cat7!
Cat-17config8'%nter $an 1
Cat-17config-if8'%) address 10>1>1>11 255>255>255>0
Cat-17config-if8'9o shut
Cat-17config-if8'&;it
CCIE Routing and Switching Catalyst 3560 Lab Pae $% "# !$%
Cat-17config8'%) defau$t-gatewa* 10>1>1>2
Tas- !>
Configure Cat-2 such that :nicast, -roadcast and 0u$ticast traffic is restricted to 40M on
itAs )ort F0/14> .owe2er, when the rate of #u$ticast traffic e;ceeds the set thresho$d, a$$
inco#ing traffic 7broadcast, #u$ticast, and unicast8 shou$d be dro))ed unti$ the $e2e$
dro)s be$ow the thresho$d $e2e$> 1= 9=! configure )o$icing to acco#)$ish this tas(>
>
On Cat7$
Cat-27config8'%nt F0/14
Cat-27config-if8'Stor#-contro$ #u$ticast $e2e$ 40
Cat-27config-if8'Stor#-contro$ unicast $e2e$ 40
Cat-27config-if8'Stor#-contro$ broadcast $e2e$ 40
St"r17("ntr"l (an be &se0 #"r .r"a0(ast2 Un'(ast an0 F&lt'(ast tra##'(4 T)'s
W)en t)e rate "# F&lt'(ast tra##'( e;(ee0s a set t)res)"l02 all 'n("1'n tra##'(
@.r"a0(ast2 F&lt'(ast an0 Un'(astA 's 0r"33e0 &nt'l t)e le5el 0r"3s bel"w t)e
t)res)"l0 le5el2 an0 "nly t)e S3ann'n7tree 3a(-ets are #"rwar0e04 W)en .r"a0(ast
an0 Un'(ast t)res)"l0s are e;(ee0e02 tra##'( 's bl"(-e0 #"r "nly t)e ty3e "# tra##'(
t)at e;(ee0e0 t)e t)res)"l04
Show stor#-contro$ f0/14 #u$ticast
--------- ------------- ----------- ----------- -----------
Fa0/14 3in( down 40>00M 40>00M 0>00M
Tas- !,
Configure routers R1 and R3 using the fo$$owing %" addresses+
R1 - F0/0 O 12>1>1>1 /5
R3 - F0/0 O 34>1>1>1 /5
Configure Cat-1 to route between 3<9 12 and 34 such that these routers can )ing each
other> :se an* %) address on Cat-1 to acco#)$ish this tas(>
On R!
R17config8'%nterface F0/0
R17config-if8'%) address 12>1>1>1 255>0>0>0
R17config-if8'9o shut
R17config-if8'&;it
R17config8'%) route 0>0>0>0 0>0>0>0 12>1>1>12
On R3
R37config-if8'&;it
R37config8'%) route 0>0>0>0 0>0>0>0 34>1>1>34
On Cat7!
Cat-17config8'%) routing
Cat-17config8'%nterface $an 12
Cat-17config8'%nterface $an 34
A Sw't() /'rt&al Inter#a(e @S/IA re3resents a /LAN "# sw't() 3"rts as "ne 'nter#a(e
t" t)e r"&t'n4 Only "ne S/I (an be ass"('ate0 w't) a /LAN4 T)'s 's ne(essary w)en
("n#'&r'n Inter /lan r"&t'n4
W)en (reat'n an S/I #"r a /LAN2 t)e 0es'nate0 n&1ber 1&st 1at() t)e /LAN
n&1ber>
On R!
R1'"ing 34>1>1>1
!*)e esca)e seIuence to abort>
Sending 5, 100-b*te %C0" &chos to 34>1>1>1, ti#eout is 2 seconds+
PPPPP
Success rate is 100 )ercent 75/58, round-tri) #in/a2g/#a; O 1/2/4 #s

On R3
R3'"ing 12>1>1>1
PPPPP
Tas- $0
Re#o2e the configuration fro# the )re2ious ste) and configure %nter $an routing
between 3<9s 12 and 34> 1= 9=! use S%s to acco#)$ish this tas(> F0/1 interface of
an* router can be used to acco#)$ish this tas(> :se the %" addressing fro# the )re2ious
tas(> &nsure to use an industr* standard )rotoco$ for the trun(>
S'n(e R5Cs *0+0 's 3art "# /LAN 562 R5Cs *0+! 's &se0 t" a(("13l's) t)'s tas-4
On Cat7!
Cat-17config8'9o %nterface $an 12
Cat-17config8'9o %nterface $an 34
On Cat7$
Cat-27config8'%) routing
Cat-27config-if8'Switch)ort trun( enca) 1ot1I
CCIE Routing and Switching Catalyst 3560 Lab Pae $= "# !$%
Cat-27config-if8'Switch)ort #ode trun(
On R5
R57config-if8'&;it
R57config8'%nt f0/1>12
R57config-if8'&nca) dot1I 12
R57config8'%nt f0/1>34
R57config-if8'&nca) dot1I 34
On R!
R1'"ing 34>1>1>1
PPPPP
On R3
R3'"ing 12>1>1>1
PPPPP
CCIE Routing and Switching Catalyst 3560 Lab Pae $> "# !$%
Tas- $!
Configure Cat-1 such that whene2er the switch $earns or re#o2es a 0<C address on its
)ort F0/15, an S90" notification is generated and sent to the 90S $ocated at
162>165>1>100> Since there are #an* users co#ing and going fro# the networ(, set u) a
tra) inter2a$ ti#e to bund$e the notification tra)s and reduce networ( traffic using the
fo$$owing )ara#eters+
!he tra)s shou$d be generated e2er* 30 #inutes>
!he tra) shou$d contain a #a;i#u# of 150 entries>
T)'s #eat&re enables &s t" tra(- &sers "n a netw"r- by st"r'n t)e Fa( a00ress
a(t'5'ty "n t)e sw't()4 On(e ("n#'&re02 e5ery t'1e a FAC a00ress 's learne0 "r
re1"5e0 an SNFP n"t'#'(at'"n 's enerate0 an0 sent t" t)e NFS4 On a 5ery b&sy
netw"r- w)en l"ts "# &sers ("1e an0 "2 t)e 0e#a&lt be)a5'"r 's t)at an SNFP tra3
's sent e5ery se("n04 .e(a&se t)'s (an ("ns&1e ban0w'0t)2 t)ere are tw" 3ara1eters
t)at (an be ("n#'&re0 t" re1e0y t)'s s't&at'"n an0 t)ey are as #"ll"ws9
Fa( a00ress7table n"t'#'(at'"n 'nter5al ? !his 2a$ue s)ecifies the notification
tra) inter2a$ in seconds between each set of tra)s that are generated to the 90S>
1efau$t 2a$ue is one second, and the range is 0 B 2,144,453,644 seconds>
Fa( a00ress7table n"t'#'(at'"n )'st"ry7s'Be ? S)ecifies the #a;i#u# nu#ber of
entries in the 0<C notification histor* tab$e> !he defau$t 2a$ue is 1, and the range
is 1 B 500 entries>
On Cat7!
Cat-17config8'Sn#)-ser2er host 162>165>1>100 tra)s )ri2ate
T)e ab"5e ("11an0 '0ent'#'es t)e NFS
Cat-17config8'Sn#)-ser2er enab$e tra)s #ac-notification
T)'s ("11an0 enables SNFP tra3s 1a(7n"t'#'(at'"n
Cat-17config8'0ac-address-tab$e notification
T)e ab"5e ("11an0 enables t)e 1a( a00ress7table n"t'#'(at'"n "n t)e sw't()
Cat-17config8'0ac-address-tab$e notification inter2a$ 1500
T)'s ("11an0 sets t)e 'nter5al
Cat-17config8'0ac-address-tab$e notification histor*-siHe 150
T)'s ("11an0 sets t)e )'st"ry7s'Be
Cat-17config8'%nt f0/15
Cat-17config-if8'Sn#) tra) #ac-notification added
CCIE Routing and Switching Catalyst 3560 Lab Pae $, "# !$%
T" enable t)e FAC n"t'#'(at'"n tra3 w)ene5er a FAC a00ress 's a00e0
Cat-17config-if8'Sn#) tra) #ac-notification re#o2ed
T" enable t)e FAC n"t'#'(at'"n tra3 w)ene5er a FAC a00ress 's re1"5e0
Cat-1'Show #ac address-tab$e notification interface f0/15
0<C 9otification Feature is 1isab$ed on the switch
%nterface FAC A00e0 Tra3 FAC Re1"5e0 Tra3
--------- ---------------------- --------------------------
Fast&thernet0/15 Enable0 Enable0
Cat-1'Show #ac address-tab$e notification
Cat-1'sh #ac-address-tab$e notification
0<C 9otification Feature is &nab$ed on the switch
%nter2a$ between 9otification !ra)s + 1500 secs
9u#ber of 0<C <ddresses <dded + 0
9u#ber of 0<C <ddresses Re#o2ed + 0
9u#ber of 9otifications sent to 90S + 0
0a;i#u# 9u#ber of entries configured in .istor* !ab$e + 150
Current .istor* !ab$e 3ength + 0
0<C 9otification !ra)s are &nab$ed
.istor* !ab$e contents
----------------------
Tas- $$
=)ti#iHe the two switches using the fo$$owing )o$icies+
Cat-1 shou$d be configured such that its #e#or* resources in the switch are
o)ti#iHed for routing>
Cat-2 shou$d be configured to be a $a*er 2 switch>
Sw't() 0atabase 1anae1ent @SDFA are te13lates t)at (an be ("n#'&re0 t"
all"(ate 1e1"ry res"&r(es 'n t)e sw't() #"r a s3e('#'( #eat&re 0e3en0'n "n w)at t)e
sw't() 's &se0 #"r 'n a '5en netw"r-4
A sw't() (an be ("n#'&re0 t" &se "ne "# t)e #"ll"w'n te13lates9
A((ess B :sed for Q=S c$assification and Securit*>
R"&t'n B :sed for routing
/lan B 1isab$es routing and sets the switch to be a $a*er 2 switch>
E;ten0e071at() B refor#ats routing #e#or* s)ace to a$$ow 144-bit $a*er 3
!C<0 su))ort needed for WCC" and/or #u$ti)$e RF instances>
On Cat7!
Cat-17config8'Sd# )refer routing
On Cat7$
Cat-27config8'Sd# )refer 2$an
<"& 1&st reb""t #"r t)ese sett'ns t" ta-e e##e(t4
T" /er'#y t)e ("n#'&rat'"n9
On Cat7$
Cat-2'Show sd# )refer
T)e (&rrent te13late 's t)e 5lan te13late>
!he se$ected te#)$ate o)ti#iHes the resources in
the switch to su))ort this $e2e$ of features for
5 routed interfaces and 1E 3<9s>
nu#ber of unicast #ac addresses+ 5E
nu#ber of ig#) grou)s+ 1E
nu#ber of Ios aces+ 1E
nu#ber of securit* aces+ 1E
nu#ber of unicast routes+ 0
nu#ber of #u$ticast routes+ 0
A sw't() 'n /LAN te13late 's str'(tly a layer $ sw't()2 ("11an0s l'-e 6n"
sw't()3"rt8 &n0er a '5en 'nter#a(e w'll n"t w"r- an0 an 'n("13lete ("11an0
err"r 1essae w'll be 0's3laye04
Tas- $3
Create 3<9s 30, 31 and 32 on Cat-1 and ensure that these 3<9s can not tra2erse the
trun( $in( between Cat-1 and Cat-2>
CCIE Routing and Switching Catalyst 3560 Lab Pae 3! "# !$%
.y 0e#a&lt a tr&n- 3"rt sen0s an0 re(e'5es tra##'( #r"1 all /LANs2 )"we5er2 a '5en
/LAN "r /LANs (an be re1"5e0 #r"1 t)e tr&n- l'n- 'n "r0er t" 3re5ent tra##'( #r"1
t)at /LAN+s #r"1 tra5ers'n "5er t)e tr&n->
On Cat7!
Cat-17config8'$an 30-32
.e#"re ("n#'&r'n t)e tas- we )a5e t" ()e(- t" see '# t)e /LANs t)at we M&st (reate0
(an tra5erse t)e tr&n- l'n-4
Cat-1'Show interface trun(
*a0+!, !7%0,%
*a0+$0 !7%0,%
Fa0/16 1,12,30-32,34,56
Fa0/20 1,12,30-32,34,56
Fa0/16 1
Fa0/20 none
T" re1"5e t)"se /LANs #r"1 t)e tr&n- l'n-s9
On ."t) Sw't()es
Switch7config8'%nterface range f0/16-20
Switch7config-if-range8'Switch)ort trun( a$$owed 2$an e;ce)t 30,31,32

N"te '# an Et)erC)annel was (reate02 t)e ("11an0 )a0 t" be ("n#'&re0 0're(tly t)e
3"rt7()annel 'nter#a(e4
CCIE Routing and Switching Catalyst 3560 Lab Pae 3$ "# !$%
On Cat7!
Cat-1'Show int trun(
*a0+!, !7$,2337%0,% N"te /LANs 30 ? 3$ are re1"5e0 #r"1 t)e tr&n-
*a0+$0 !7$,2337%0,%
Fa0/16 1,12,34,56
Fa0/20 1,12,34,56
Fa0/16 1
Fa0/20 none
S"1e "# t)e "3t'"ns t)at (an be &se0 w't) 6Sw't()3"rt tr&n- all"we0 /LAN8
("11an0 are: Re1"5e2 a002 all2 e;(e3t4
T)e 6Sw't()3"rt tr&n- all"we0 5lan re1"5e 3023!23$8 ("11an0 ("&l0 a(("13l's) t)e
sa1e tas-4
Tas- $%
Configure Cat-1As )ort F0/15 and F0/16 such that when c$ient "Cs connect to these )orts,
the* auto#atica$$* beco#e #e#ber of a gi2en 3<9> Cat-1 shou$d be configured to use
10>1>1>1 as the )ri#ar* and 10>1>1>2 as the secondar* 0"S ser2er> &nsure that the $oca$
switch reconfir#s the 3<9 #e#bershi) e2er* ha$f hour and if the 0"S can not be
contacted, the $oca$ switch wi$$ retr* 5 ti#es before considering the 0"S una2ai$ab$e>
/FPS9
T)e 3550 sw't() (anCt be set&3 as a /FPS ser5er2 b&t 't (an be ("n#'&re0 as a
/FPS (l'ent4
T)e (l'ent ("11&n'(ates w't) t)e /FPS t)r"&) /lan N&ery Pr"t"("l @/NPA4
W)en a /FPS re(e'5es a /NP #r"1 t)e (l'ent2 't sear()es 'ts 0atabase #"r a FAC
t" /LAN 1a33'n2 an0 '# t)e 1a33'n 's #"&n02 't ("n5eys t)e /LAN 'n#"r1at'"n
t" t)e (l'ent an0 t)en t)e (l'ent ass'ns t)at '5en /LAN t" t)e 3"rt t)at t)e (l'ent
's ("nne(te0 t"4
T)e /FPS (an "3erate 'n Se(&re 1"0e2 w)'() 1eans t)at '# a FAC t" /LAN
1a33'n (an n"t be #"&n0 'n 'ts 0atabase2 t)e /FPS w'll sen0 a 3"rt7s)&t0"wn7
1essae t" t)e (l'ent an0 t)e (l'ent w'll s)&t 0"wn t)at '5en 3"rt2 )"we5er2 '# t)e
/FPS 's n"t ("n#'&re0 'n a se(&re 1"0e2 't w'll sen0 a((ess70eny 1essae2 an0 t)e
(l'ent w'll ("nstantly 1"n't"r t)e 3"rt an0 w'll reMe(t all tra##'( #r"1 t)at '5en
3"rt4
T)e /FPS (l'ent 3er'"0'(ally re("n#'r1s t)e /LAN 1e1bers)'3 'n#"r1at'"n
re(e'5e0 #r"1 t)e /FPS ser5er4 .y 0e#a&lt t)'s 's 3er#"r1e0 e5ery 60 1'n&tes2 t)'s
'nter5al (an be ()ane0 &s'n 6/FPS re("n#'r18 l"bal ("n#' ("11an04
I# t)e /FPS (l'ent (anCt ("nta(t t)e /FPS ser5er2 't w'll retry t" establ's) t)at
("11&n'(at'"n t)ree t'1es an0 t)'s 5al&e (an be ()ane0 &s'n 513s retry8
("11an0 'n t)e l"bal ("n#' 1"0e4
T)e 0atabase 's 'n #"r1 "# an ASCII #'le sa5e0 "n a T*TP ser5er2 w)'() t)e /FPS
ser5er a((esses4

On Cat7!
.e#"re ("n#'&r'n t)'s tas- we s)"&l0 ()e(- s"1e "# t)e 0e#a&lt 5al&es9
Cat-1'Show 2#)s
Q" C$ient Status+
--------------------
0"S Q" ersion+ 1
Reconfir# %nter2a$+ 60 #in
Ser2er Retr* Count+ 3
0"S do#ain ser2er+
Reconfir#ation status
---------------------
0"S <ction+ 9o 1*na#ic "ort
/FPS /NP 5ers'"n 's 5ers'"n !2 an0 t)e re("n#'r1at'"n 's at 'ts 0e#a&lt 5al&e "# 60
1'n&tes2 an0 t)e retry 5al&e 's set t" 34 T)ere are n" /FPS ser5ers>
Cat-17config8'int range f0/15 - 16
Cat-17config-if-range8'switch)ort #ode access
Cat-17config-if-range8'switch)ort access 2$an d*na#ic
Cat-17config-if-range8'no shut
CCIE Routing and Switching Catalyst 3560 Lab Pae 3% "# !$%
T)e ab"5e ("11an0 sets 3"rts *0+!5 an0 *0+!6 t" /LAN 0yna1'(2 w)'() 1eans t)at t)ey
w'll a(E&'re t)e'r /LAN 'n#"r1at'"n 0yna1'(ally>

Cat-17config8'2#)s reconfir# 30
Cat-17config8'2#)s retr* 5
T)e ab"5e tw" ("11an0s ("n#'&re t)e re("n#'r1at'"n 'nter5al t" 30 1'n&tes an0 t)e
retry ("&nter t" 54
Cat-17config8'2#)s ser2er 10>1>1>1 )ri#ar*
Cat-17config8'2#)s ser2er 10>1>1>2
T)ese ("11an0s ("n#'&re t)e 3r'1ary an0 t)e se("n0ary /FPS ser5ers4
Cat-1'Show 2#)s
Q" C$ient Status+
--------------------
0"S Q" ersion+ 1
Reconfir# %nter2a$+ 30 #in
Ser2er Retr* Count+ 5
0"S do#ain ser2er+ 10>1>1>2
10>1>1>1 7)ri#ar*, current8
Reconfir#ation status
-------------------------
0"S <ction+ other
Tas- $5
"ort F0/15 on Cat-1 is connected to a Cisco 4660 %" "hone> oice traffic that originates
fro# the )hone is tagged with a CoS of 5>
< "C is connected to the 4660 %" "hone which is generating traffic with CoS of 3> &nsure
that the data traffic be$ongs to 3<9 3 and the oice traffic be$ongs to 3<9 5> !he
traffic originated b* the 4660 %" "hone shou$d #aintain itAs CoS 2a$ue, whereas the traffic
that originated fro# the "C connected to the 4660 %" "hone shou$d be re-written with a
CoS of 1>

On Cat7!
Cat-17config8'0$s Ios
Cat-17config-if8'Switch)ort access $an 3
Cat-17config-if8'Switch)ort 2oice $an 5
Cat-17config-if8'Switch)ort )riorit* e;tend cos 1
Cat-17config-if8'0$s Ios trust cos
W)en t)e 3)"ne ets ("nne(te0 t" t)e sw't() 't w'll #"r1 an >0$4!E tr&n- l'n-4 T)e
tra##'( 0est'ne0 t" t)e PC w'll be (arr'e0 'n t)e a((ess /LAN2 w)ereas t)e tra##'(
0est'ne0 #"r t)e =,60 IP P)"ne w'll be (arr'e0 'n /"'(e /LAN4
.y 0e#a&lt t)e 3550 0"esnCt 3r"(ess t)e C"S 5al&e an0 rewr'tes all #ra1es w't) a
C"S 5al&e "# 04 T" ("n#'&re t)e 3)"ne s&() t)at 't 3r"(esses t)e C"S 5al&es2 t)e
NOS 1&st be enable0 l"bally &s'n t)e 61ls E"s8 ("11an04
T" ("n#'&re t)e sw't() s" 't tr&sts t)e 'n("1'n C"S 5al&e #r"1 t)e =,60 IP P)"ne
t)e 61ls E"s tr&st ("s8 ("11an0 's &se04
S'n(e t)e PC ("nne(te0 t" t)e IP P)"ne (an sen0 tra##'( t" t)e P)"ne w't) any C"s
5al&e an0 t)e 3)"ne wants t" ens&re t)at t)e 5"'(e tra##'( t)at 't enerates et better
3r'"r'ty2 t "5err'0es t)e C"S #"r all tra##'( t)at 's "r''nate0 by t)e PC4 In t)'s tas-
we )a5e t" ("n#'&re t)e sw't() s&() t)at 't re7wr'tes t)e tra##'( w't) a C"S "# !2
t)ere#"re2 t)e 6Sw't()3"rt 3r'"r'ty e;ten0e0 ("s !8 ("11an0 's &se04
Tas- $6
!he third switch shou$d be configured with a hostna#e of Cat-3 and the forth switch
shou$d be configured with a hostna#e of Cat-4
On t)e T)'r0 Sw't()
On t)e *"rt) Sw't()

Tas- $=
Configure trun(ing between Cat-3 and Cat-4 using )orts F0/16 and F0/20> !he !"
do#ain na#e shou$d be ?CC%&@>
T)e reas"n DOT!N tr&n-'n en(a3s&lat'"n 's ()"sen 's be(a&se "# tas- $,2 t)e
re("11en0at'"n 's t)at t)e ent're lab s)"&l0 be rea0 a)ea0 "# t'1e an0 a 3lan "#
a(t'"n s)"&l0 be #"r1&late0 'n "r0er t" a5"'0 re0&n0ant ("n#'&rat'"n4
On ."t) Sw't()es
7config8'%nterface range F0/16-20
7config-if-range8'Switch)ort trun( enca) dot1I
7config-if-range8'Switch)ort #ode trun(
7config8'2t) do#ain CC%&
On Cat73
Fa0/16 on 502>1I trun(ing 1
Fa0/16 1-4064
Fa0/20 1-4064
Fa0/16 1
Fa0/20 1
Fa0/16 1
Fa0/20 1
Tas- $>
Configure the fo$$owing 3<9s and )ort assign#ents on Cat-3 and Cat-4 for the future
routers+
CCIE Routing and Switching Catalyst 3560 Lab Pae 3= "# !$%
Router %nterface 3<9 nu#ber C<! Switches "ort
R!! ? *0+0 !!$ SW3 ? *0+!
R!$ ? *0+0 !!$ SW3 ? *0+$
R!3 ? *0+0 !3% SW3 ? *0+3
R!% ? *0+0 !3% SW3 ? *0+%
R!5 ? *0+0 !56 SW3 ? *0+5
R!6 ? *0+0 !56 SW3 ? *0+6
On Cat73
Cat-37config-if-range8'switch #ode access
Cat-37config-if-range8'switch access 2$an 112


Cat-37config8'interface range F0/5 - 6
On Cat73
Cat-3'Show 2$an brief
---- -------------------------------- --------- -------------------------------
Fa0/11, Fa0/12, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/14, Fa0/15
Fa0/23, Fa0/24, /i0/1, /i0/2
112 3<90112 acti2e Fa0/1, Fa0/2
134 3<90134 acti2e Fa0/3, Fa0/4
156 3<90156 acti2e Fa0/5, Fa0/6
%#he rest o! the outut is o$itted&
CCIE Routing and Switching Catalyst 3560 Lab Pae 3> "# !$%
On Cat7%
Cat-4'Show 2$an brief
---- -------------------------------- --------- -------------------------------
Fa0/5, Fa0/6, Fa0/4, Fa0/5
Fa0/6, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/14, Fa0/15, Fa0/23, Fa0/24
/i0/1, /i0/2
112 3<90112 acti2e
134 3<90134 acti2e
156 3<90156 acti2e
Tas- $,
&nsure that 3<9 112 is configured such that it does 9=! get tagged as the traffic for
this 3<9 tra2erses the trun( $in(/s>
W)en a tr&n- 's ("n#'&re0 w't) D"t!E2 't (an re(e'5e b"t) tae0 an0 &ntae0
tra##'( by 0e#a&lt2 t)e sw't() #"rwar0s &ntae0 tra##'( 'n t)e nat'5e /LAN ONL<4
I# a '5en /LAN s)"&l0 NOT be tae0 as 't tra5erses t)e tr&n- l'n- t)en t)at
/LAN (an be set as t)e nat'5e /LAN4
W)en t)e nat'5e /LAN 's ()ane02 ens&re t)at t)e ()ane 's ("n#'&re0 "n b"t)
sw't()es "r t)e tr&n- l'n- w'll " 0"wn4
On ."t) Sw't()es
7config8'%nterface range F0/16-20
7config-if-range8'Switch)ort trun( nati2e 3<9 112

Cat73
CCIE Routing and Switching Catalyst 3560 Lab Pae 3, "# !$%
Fa0/16 1-4064
Fa0/20 1-4064
Fa0/16 1,112,134,156
Fa0/20 1,112,134,156
Fa0/16 134,156
Fa0/20 134,156
Tas- 30
Configure 0u$ti-instance of S)anning !ree on the switches using the fo$$ows )o$ic*+
!here shou$d be two instances of S!", instance 1 and 2
%nstance 1 shou$d hand$e 3<9s 112 and 134
%nstance 2 shou$d hand$e 3<9 156
<$$ future 3<9s shou$d use instance 0
%nstance 1 shou$d use F0/16
%nstance 2 shou$d use F0/20
Cat-3 shou$d be the root bridge for the first instance
Cat-4 shou$d be the root bridge for the second instance
!he na#e of this configuration shou$d be CC%&
!he re2ision nu#ber shou$d be 1
On ."t) Sw't()es
T)e 0e#a&lt 1"0e #"r s3ann'n7tree 's P/ST2 t)e #"ll"w'n S)"w ("11an0 5er'#'es
t)'s 'n#"r1at'"n9
Show s)anning-tree su##ar*
Sw't() 's 'n 35st 1"0e
Root bridge for+ none
&;tended s*ste# %1 is enab$ed
CCIE Routing and Switching Catalyst 3560 Lab Pae %0 "# !$%
On ."t) Sw't()es
7config8'S)anning-tree #ode #st
T)'s ("11an0 ()anes t)e 1"0e "# t)e sw't() t" FST4
7config8'S)anning-tree #st configuration
7config-#st8'Re2ision 1
7config-#st8'9a#e CC%&
7config-#st8'%nstance 1 2$an 112,134
7config-#st8'%nstance 2 2$an 156
T)e #'rst ("11an0 all"ws &s t" enter 'n t)e FST ("n#'&rat'"n 1"0e4 T)e se("n0
("11an0 s3e('#'es t)e ("n#'&rat'"n re5's'"n n&1ber: t)e rane #"r t)'s n&1ber 's
!7655354 T)e t)'r0 ("11an0 s3e('#'es t)e na1e #"r t)'s ("n#'&rat'"n 'n t)'s (ase
CCIE4 T)e #"rt) an0 #'#t) ("11an0s 1a3 t)e reE&este0 /LANs t" t)e s3e('#'e0
'nstan(es2 FST s&33"rts !6 'nstan(es2 by 0e#a&lt all t)e #&t&re /LANs w'll be
ass'ne0 t" 'nstan(e 02 'nstan(e 0 's t)e (at() all 'nstan(eA4

T" 5er'#y t)'s ("n#'&rat'"n9
On b"t) Sw't()es
Show s)anning-tree #st configuration
9a#e RCC%&S
Re2ision 1
%nstance $ans #a))ed
-------- ------------------------------------------
0 1-11,13-33,35-55, 54-4064
1 112,134
2 156
N"te 'nstan(e 0 )an0les t)e rest "# t)e 5lans t)at are n"t ass'ne0 t" a '5en
'nstan(e: 'nstan(e 0 's t)e (at() all 'nstan(e4
T" /er'#y t)e ("n#'&rat'"n be#"re ("n#'&r'n t)e ne;t 3"rt'"n "# t)e
tas-9
On Cat73
Cat-3'Show s)anning-tree bridge
.e$$o 0a; Fwd
CCIE Routing and Switching Catalyst 3560 Lab Pae %! "# !$%
0S! %nstance -ridge %1 !i#e <ge 1$* "rotoco$
---------------- ------------------------------------------- ---- ----- --- -----------
0S!0 32465 732465, 08 0016>064f>5600 2 20 15 #st)
0S!1 32466 732465, 18 0016>064f>5600 2 20 15 #st)
0S!2 32440 732465, 28 0016>064f>5600 2 20 15 #st)
N"te t)'s ("11an0 0's3lays t)e .ID #"r y"&r sw't()2 an0 'nstea0 "# ass'n'n a .ID
t" ea() /LAN2 t)ere 's a .ID #"r ea() 'nstan(e4
On Cat73
Cat-3'Show s)anning-tree root
Root .e$$o 0a; Fwd
0S! %nstance Root %1 Cost !i#e <ge 1$* Root "ort
---------------- ----------------------------- ------------- --------- ------- ---- ----------------
0S!0 32465 0016>064f>5600 0 2 20 15 F0/16
0S!1 32466 0016>064f>5600 20000 2 20 15 F0/16
0S!2 32440 0016>064f>5600 20000 2 20 15 F0/16
T)e ab"5e ("11an0 0's3lays t)e .ID "# t)e r""t br'0e #"r 0'##erent 'nstan(es4 N"te
'n t)'s (ase Cat7! 's t)e r""t #"r all 'nstan(es4
On Cat73

Cat-37config8'S)anning-tree #st 1 )riorit* 0
On Cat7%

T)e ab"5e ("11an0s w'll ()ane t)e sw't() 3r'"r'ty an0 1a-e 't 1"re l'-ely t)at
Cat73 w'll be ()"sen as t)e r""t sw't() #"r 'nstan(e ! an0 Cat7% w'll be ()"sen as t)e
r""t br'0e #"r 'nstan(e $4
T)'s n&1ber 1&st be 'n 'n(re1ents "# %0,64 Re1e1ber t)e l"wer 5al&e )as )')er
3re#eren(e4
On Cat73
Cat-3'Show s)anning root
Root .e$$o 0a; Fwd
CCIE Routing and Switching Catalyst 3560 Lab Pae %$ "# !$%
---------------- ----------------------------- ---------- ------ ----- -------- ----------------
0S!0 32465 0015>b656>5250 0 2 20 15 Fa0/16
0S!1 1 0016>064f>5600 0 2 20 15
0S!2 2 0015>b656>5250 200000 2 20 15 Fa0/16
N"te t)e l"(al sw't() @Cat73A 's t)e r""t br'0e #"r 'nstan(e !2 w)ereas2 Cat7% 's t)e
r""t #"r 'nstan(es 0 an0 $4
On Cat7%
Cat-4'Show s)anning root
Root .e$$o 0a; Fwd
---------------- ----------------------------- ---------- ------ ----- -------- ----------------
0S!0 32465 0015>b656>5250 0 2 20 15
0S!1 1 0016>064f>5600 200000 2 20 15 Fa0/16
0S!2 2 0015>b656>5250 0 2 20 15
N"te Cat7% 's t)e r""t br'0e #"r 'nstan(e $ an0 02 w)ereas2 Cat73 's t)e r""t #"r
'nstan(e !4
T" ("n#'&re t)e last 3"rt'"n "# t)'s tas-2 3"rt73r'"r'ty #eat&re 's &se0 as #"ll"ws9
On ."t) Sw't()es
7config8'%nt F0/16
7config-if8'S)anning-tree #st 1 )ort-)riorit* 0 H') 3r'"r'ty
7config-if8' S)anning-tree #st 2 )ort-)riorit* 125
7config8'%nt F0/20
7config-if8'S)anning-tree #st 1 )ort-)riorit* 125
7config-if8'S)anning-tree #st 2 )ort-)riorit* 0
In t)'s tas- P"rt73r'"r'ty 's &se0 w)en sele(t'n an 'nter#a(e t" 3&t 'nt" t)e
#"rwar0'n state #"r a '5en 'nstan(e: a l"wer 5al&e )as a )')er 3r'"r'ty4 In t)'s
(ase 3"rt *0+!, w'll be &se0 by all t)e /LANs t)at are ass'ne0 t" 'nstan(e !2
be(a&se 't )as a )')er 3r'"r'ty @L"wer 5al&eA2 an0 t)e se("n0 'nstan(e w'll &se 3"rt
*0+$! be(a&se 't )as been ("n#'&re0 w't) a )')er 3r'"r'ty @L"wer 5al&eA4
On Cat73
Cat-3'Show s)anning-tree int f0/16
0st %nstance Ro$e Sts Cost "rio>9br !*)e
---------------- -------- --------- ---------- ---------- -------
0S!0 Root FW1 200000 125>23 "2)
0S!1 1esg FW1 200000 0>23 "2)
0S!2 <$tn -3E 200000 125>23 "2)
Cat-3'Sh s)anning-tree int f0/20
---------------- -------- --------- ---------- ---------- -------
0S!0 <$tn -3E 200000 125>22 "2)
0S!1 1esg FW1 200000 125>22 "2)
0S!2 Root FW1 200000 0>22 "2)

On Cat7%
---------------- -------- --------- ---------- ---------- -------
0S!0 1esg FW1 200000 125>21 "2)
0S!1 Root FW1 200000 0>21 "2)
0S!2 1esg FW1 200000 125>21 "2)
Cat-4'Sh s)anning-tree int f0/20
---------------- -------- --------- ---------- ---------- -------
0S!0 1esg FW1 200000 125>22 "2)
0S!1 <$tn -3E 200000 125>22 "2)
0S!2 1esg FW1 200000 0>22 "2)
N"te 1st 'nstan(e ! 's bl"(-e0 "n 3"rt *0+$0 b&t #"rwar0e0 "n *0+!, an0 1st
'nstan(e $ 's bl"(-e0 "n 'nter#a(e *0+!, an0 #"rwar0e0 "n *0+$04
Tas- 3!
!here is a )rotoco$ ana$*Her connected to F0/15 on Cat-4> Lou recei2ed a reIuest to
#onitor and ana$*He a$$ )ac(ets for )ort F0/16 on Cat-3> Configure the switches to
acco##odate this reIuest>
On Cat73
CCIE Routing and Switching Catalyst 3560 Lab Pae %% "# !$%
Cat-37config-2$an8'Re#ote-s)an
Cat-37config-2$an8'&;it
T)e (reat'"n "# t)'s /LAN (an "nly be 0"ne 'n t)e l"bal ("n#'&rat'"n 1"0e2
be(a&se t)'s 's t)e "nly 1"0e t)at all"ws &s t" set t)e /LAN as re1"te7s3an4 Ens&re
t)at t)'s /LAN 's 3r"3aate0 t" Cat7%4
On Cat739
Cat-3'Sh 2$an brie
---- -------------------------------- --------- -------------------------------
Fa0/11, Fa0/12, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/14, Fa0/15
Fa0/16, Fa0/20, Fa0/23, Fa0/24
/i0/1, /i0/2
112 3<900112 acti2e Fa0/1, Fa0/2
134 3<900134 acti2e Fa0/3, Fa0/4
156 3<900156 acti2e Fa0/5, Fa0/6
,0 /LAN00,0 a(t'5e Ens&re t)at t)'s /LAN 's 3r"3aate0
t" Cat7%

On Cat7%
Cat-4'Sh 2$an brie
---- -------------------------------- --------- -------------------------------
Fa0/5, Fa0/6, Fa0/4, Fa0/5
Fa0/6, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/14, Fa0/15, Fa0/16, Fa0/20
Fa0/23, Fa0/24, /i0/1, /i0/2
112 3<900112 acti2e
134 3<900134 acti2e
156 3<900156 acti2e
,0 /LAN00,0 a(t'5e N"te t)e /LAN 's 3r"3aate04


On Cat73
Cat-3'Show 2$an re#ote-s)an
Re#ote S"<9 3<9s
----------------------------
60

On Cat7%
Cat-4'Show 2$an re#ote-s)an
Re#ote S"<9 3<9s
----------------------------
60
N"te /LAN ,0 s)"&l0 be 0's3laye0 as re1"te7s3an "n b"t) sw't()es4
On Cat73
Cat-37config8'0onitor session 1 source interface F0/16
Cat-37config8'0onitor session 1 destination re#ote 2$an 60
On Cat73
Cat-3' Show #onitor session 1
Session 1
---------
!*)e + Re#ote Source Session
Source "orts +
-oth + Fa0/16
Dest RSPAN /LAN 9 ,0
On Cat7%
Cat-47config8'0onitor session 1 source re#ote 2$an 60
Cat-47config8'0onitor session 1 destination interface F0/15
P"rt *0+!> 's w)ere t)e 3r"t"("l analyBer 's ("nne(te04
On Cat7%
Cat-4'Sh #onitor session 1
Session 1
---------
!*)e + Re#ote 1estination Session
Source RS"<9 3<9 + 60
1estination "orts + Fa0/15
&nca)su$ation + 9ati2e
%ngress + 1isab$ed
RSPAN e;ten0s SPAN by enabl'n re1"te 1"n't"r'n "# 1&lt'3le sw't()es a(r"ss y"&r
netw"r-4 T)e tra##'( #"r RSPAN tra5erses "5er a &ser 0e#'ne0 RSPAN /LAN @re1"te
5lanA2 'n t)'s (ase /LAN ,04 T)e SPAN tra##'( #r"1 3"rt *0+!6 's re#le(te0 t" /LAN ,0
@T)e RSPAN /LANA an0 t)en #"rwar0e0 "5er t)e tr&n- t" 3"rt *0+!> an RSPAN
0est'nat'"n4
Tas- 3$
Configure )orts F0/21 and F0/22 on Cat-3 and Cat-1 as trun( $in(s using an industr*
standard )rotoco$, these $in(s shou$d a))ear to S!" as a sing$e $in(> %f one of the $in(s
fai$s, the traffic shou$d use the other $in( without an* interru)tion>
Et)erC)annels 3r"5'0e t)e #"ll"ws9
Fau$t-to$erant, high s)eed $in(s between switches and routers>
&therChanne$ )ro2ides an auto#atic reco2er* for the $oss of a $in( b*
redistributing the traffic across the re#aining $in(/s>
S!" wi$$ not b$oc( one of the $in(s in the bund$e because to S!", the bund$e $oo(s
$i(e a sing$e $in(>
:) to 5 $in(s can be co#bined to )ro2ide #ore bandwidth>
!he $in(s within the bund$e #ust ha2e the sa#e characteristics such as du)$e;ing,
s)eed and etc>
&therChanne$ can be configured as $a*er 2 or $a*er 3>
With 3a*er 3, a $ogica$ interface 7"ort-Channe$8 is statica$$* configured and a$$
3a*er 3 configurations are )erfor#ed under that interface>
With 3a*er 2, the $ogica$ interface is created auto#atica$$*>
With both 3a*er 2 and 3a*er 3, )h*sica$ interfaces #ust be #anua$$* assigned to
the $ogica$ interface using ?channe$-grou)@ configuration co##and>
&therChanne$s can be configured auto#atica$$* using "ort aggregation )rotoco$
CCIE Routing and Switching Catalyst 3560 Lab Pae %= "# !$%
7"<g"8 or 3in( <ggregation )rotoco$ 73<C"8>
"<g" is a Cisco )ro)rietar* )rotoco$, whereas 3<C" is an industr* standard %&&&
502>3ad )rotoco$>
Switches can be configured to use "<g" b* configuring the# in <:!= or
1&S%R<-3& #ode>
Switches can be configured to use 3<C" b* configuring the# in <C!%& or
"<SS%& #ode>
%f the switches are configured in =9 #ode, the* wi$$ not e;change 3<C" or "<g"
)ac(ets>
T)ere are 5 1"0es t)at t)e sw't()es (an be ("n#'&re0 'n9
ON B Forces the interface into an &therChanne$ without "<g" or 3<C" )ac(ets,
both switches #ust be configured in =9 #ode for the &therChanne$ to be
estab$ished>
ACTI/E B :sed in 3<C", the switches wi$$ acti2e$* negotiate an &therChanne$
$in(>
PASSI/E B :sed in 3<C", it )$aces the interface in a )assi2e negotiation #ode
where it on$* res)onds to 3<C" )ac(ets that it recei2es> %n this #ode the switch
wi$$ not start the negotiation )rocessN this setting #ini#iHes the trans#ission of
3<C" )ac(ets>
AUTO B :sed in "<g", it )$aces the interface in a )assi2e negotiation #odeN %t
on$* res)onds to "<g" )ac(ets that it recei2es> %n this #ode the switch wi$$ not
start the negotiation )rocessN this setting #ini#iHes the trans#ission of "<g"
)ac(ets>
DESIRA.LE B :sed in "<g", the switches wi$$ acti2e$* negotiate an
&therChanne$ $in(>
!he fo$$owing tab$e is 2er* i#)ortant when configuring &therChanne$s+

Sw't() "ne 's ("n#'&re0 as Sw't() tw" 's ("n#'&re0 as W'll an Et)erC)annel
be establ's)e0O
Des'rable Des'rable <ES
Des'rable A&t" <ES
A&t" A&t" NO
A(t'5e A(t'5e <ES
A(t'5e Pass'5e <ES
Pass'5e Pass'5e NO
.e#"re ("n#'&r'n Et)erC)annel2 y"& s)"&l0 ()e(- t" ens&re t)at t)e 'nter#a(es are
("n#'&re0 w't) t)e sa1e ()ara(ter'st'(s>
CCIE Routing and Switching Catalyst 3560 Lab Pae %> "# !$%
On ."t) Sw't()es
7config8'%nt range f0/21 - 22
7config-if-range8'Switch)ort trun( enca) dot1I
7config-if-range8'Switch)ort #ode trun(
7config-if-range8'Channe$-grou) 1 #ode on
N"te t)e sw't() w'll 0's3lay t)e #"ll"w'n 1essae t)at t)e l"'(al 'nter#a(e w'll be
(reate0>
Creating a )ort-channe$ interface "ort-channe$ 1
On Cat7!
Cat-17config8'%nt range f0/21-22
Cat-17config-if-range8'9o Shut
On Cat73
"o1 on 502>1I trun(ing 1
Fa0/16 1-4064
Fa0/20 1-4064
"o1 1-4064
Fa0/16 1,112,134,156
Fa0/20 1,112,134,156
"o1 1,112,134,156
Fa0/16 1,112,134,156
Fa0/20 1,112,134,156
"o1 1,112,134,156
CCIE Routing and Switching Catalyst 3560 Lab Pae %, "# !$%
On Cat7!
Cat-1'Sh int trun(
"o1 on 502>1I trun(ing 1
Fa0/16 1-26,33-4064
Fa0/20 1-26,33-4064
"o1 1-4064
Fa0/16 1,12,34,56
Fa0/20 1,12,34,56
"o1 1,12,30-32,34,56
Fa0/16 1
Fa0/20 none
"o1 1,12,30-32,34,56
On Cat7!
$an Ro$e Sts Cost "rio>9br !*)e
-------------- ----------------- --------- ------
3<90001 1esg FW1 12 125>42 "2)
3<90012 1esg FW1 12 125>42 "2)
3<90030 1esg FW1 12 125>42 "2)
3<90031 1esg FW1 12 125>42 "2)
3<90032 1esg FW1 12 125>42 "2)
3<90034 1esg FW1 12 125>42 "2)
3<90056 1esg FW1 12 125>42 "2)

-------------- ---------------- ---------- -----
3<90001 1esg FW1 12 125>42 "2)
3<90012 1esg FW1 12 125>42 "2)
3<90030 1esg FW1 12 125>42 "2)
3<90031 1esg FW1 12 125>42 "2)
3<90032 1esg FW1 12 125>42 "2)
3<90034 1esg FW1 12 125>42 "2)
3<90056 1esg FW1 12 125>42 "2)
On Cat73
-------------- ---------------- --------- ------
3<90001 Root FW1 12 125>42 "2)
3<90112 1esg FW1 12 125>42 "2)
3<90134 1esg FW1 12 125>42 "2)
3<90156 1esg FW1 12 125>42 "2)
------------- ---------------- ---------- -----
3<90001 Root FW1 12 125>42 "2)
3<90112 1esg FW1 12 125>42 "2)
3<90134 1esg FW1 12 125>42 "2)
3<90156 1esg FW1 12 125>42 "2)
N"te all 'nter#a(es are 'n #"rwar0'n state be(a&se t" s3ann'n7tree2 t)e 3"rt7
()annel a33ears as a s'nle 'nter#a(e4
A 6s)"w et)er()annel ! 0eta'l8 ("11an0 (an re5eal t)at t)e 'nter#a(es are w"r-'n
'n t)e b&n0le4
Tas- 33
&nsure that the &therChanne$ created in the )re2ious ste) uses destination 0<C
addresses to $oad-ba$ance the traffic $oad>
L"a0 balan('n (an be 0"ne base0 "n t)e #"ll"w'n9
S"&r(e FAC a00ress B "ac(ets forwarded to an &therChanne$ are distributed across the
)orts in the channe$ based on the source 0<C address of the inco#ing )ac(ets> When
source 0<C address $oad ba$ancing is enab$ed, the $oad distribution based on the source
and destination %" address is a$so enab$ed
Dest'nat'"n FAC a00ress B %f the &therChanne$ is between a router and a switch and
since the router has a sing$e 0<C address, destination based $oad ba$ancing is the best
wa*>
T" see t)e 0e#a&lt l"a0 balan('n9
On Cat7!
N"te t)e 0e#a&lt l"a0 balan('n 's base0 "n t)e
Cat-1'show etherchanne$ $oad S"&r(e Fa( a00ress
&therChanne$ 3oad--a$ancing =)erationa$ State 7src-#ac8+
9on-%"+ Source 0<C address
%"24+ Source 0<C address
%"26+ Source %" address
T" ("n#'&re t)e l"a0 balan('n base0 "n t)e 0est'nat'"n Fa( a00resses9
On Cat7! an0 Cat73
Switch7config8')ort-channe$ $oad-ba$ance dst-#ac
Cat-1'show etherchanne$ $oad
&therChanne$ 3oad--a$ancing =)erationa$ State 7dst-#ac8+
9on-%"+ 1estination 0<C address
%"24+ Dest'nat'"n FAC a00ress
%"26+ 1estination %" address
Tas- 3%
&rase the startu) configuration, de$ete the 2$an>dat and re$oad the switches before
)roceeding to the ne;t $ab>
35607Se(&r'ty
Answers
SW-1 SW-2
R1
F0/0 F0/1
R2
F0/0 F0/1
R3
R3
F0/0 F0/1

R4

F0/0 F0/1

R5

F0/0 F0/1

R6
F0/0 F0/1

*0+!
*0+$
*0+3
*0+%
*0+5
*0+6
*0+!,
*0+$0

*0+!
*0+$
*0+3
*0+%
*0+5
*0+6
*0+!,
*0+$0

Tas- !
Configure the hostna#e of the four Cata$*st switches as fo$$ows+
First Switch O SW-1
Second Switch O SW-2
!hird Switch O SW-3
Forth Switch O SW-4
On t)e *'rst Sw't()
Switch7config8'.ostna#e SW-1
On t)e T)'r0 Sw't()
On t)e *"rt) Sw't()
Tas- $
%n order to )re2ent a 0<C f$ooding attac(, configure )ort F0/1 on SW-1 to $i#it the
nu#ber of $earned 0<C addresses to one> !he switch shou$d $earn this 0<C address
d*na#ica$$* and then trans$ate it to staticN this entr* shou$d be de$eted after 60 #inutes of
inacti2it*>
.e#"re ("n#'&r'n 3"rt7se(&r'ty we nee0 t" e;a1'ne t)e e;'st'n ("n#'&rat'"n9
On SW7!
Lab $
3560 Se(&r'ty
Cat-1'Show )ort-securit*
Secure "ort 0a;Secure<ddr Current<ddr Securit*io$ation Securit* <ction
7Count8 7Count8 7Count8
------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------
!ota$ <ddresses in S*ste# 7e;c$uding one #ac )er )ort8 + 0
0a; <ddresses $i#it in S*ste# 7e;c$uding one #ac )er )ort8 + 6242
Cat-1'Sh )ort-securit* address
Secure 0ac <ddress !ab$e
------------------------------------------------------------------------
$an 0ac <ddress !*)e "orts Re#aining <ge
7#ins8
------- ----------------- ------- ----- -------------------
------------------------------------------------------------------------
On SW7!
Cat-17config8'%nt F0/1
Cat-17config-if8'Switch)ort #ode access
T)e ab"5e ("11an0 sets t)e 'nter#a(e sw't()3"rt 1"0e t" a((ess4 A 3"rt (an be 'n
e't)er a((ess "r tr&n- 1"0e "r else 3"rt7se(&r'ty (an n"t be ("n#'&re04
Cat-17config-if8'Switch)ort )ort-securit*
T)'s ("11an0 enables 3"rt7se(&r'ty
Cat-17config-if8'Switch)ort )ort-securit* #a;i#u# 1
T)'s ("11an0 s3e('#'es t)e 1a;'1&1 n&1ber "# FAC a00resses all"we0 "n t)'s
'5en 3"rt4 N"te t)'s ("11an0 w'll n"t a33ear 'n t)e ("n#'&rat'"n2 be(a&se 'tCs t)e
0e#a&lt sett'n #"r 3"rt7se(&r'ty4
Cat-17config-if8'Switch)ort )ort-securit* 2io$ation shutdown
T)e ab"5e ("11an0 0e#'nes t)e a(t'"n t)at t)e sw't() 1&st ta-e '# t)e 3"l'(y 's
5'"late04 N"te t)'s ("11an0 w'll n"t a33ear 'n t)e ("n#'&rat'"n2 be(a&se 'tCs t)e
0e#a&lt sett'n #"r 3"rt7se(&r'ty4
SW-17config-if8'Switch)ort )ort-securit* #ac-address stic(*
T)e ab"5e ("11an0 tells t)e sw't() t" ("n5ert t)e 0yna1'(ally learne0 FAC
a00ress+es t" stat'(4
Cat-17config-if8'Switch)ort )ort-securit* aging t*)e inacti2it*
T)ere are tw" ty3es "# a'n t)at (an be s3e('#'e0 "n a '5en 3"rt an0 t)ey are as
#"ll"ws9
Ina(t'5'ty9 T)e se(&re FAC a00ress+es "n t)'s 3"rt are 0elete0 ONL< '# t)ey
are 'na(t'5e #"r t)e s3e('#'e0 a'n t'1e4
Abs"l&te9 T)e se(&re FAC a00ress+es "n t)'s 3"rt are 0elete0 a#ter t)e
s3e('#'e0 a'n t'1e2 rear0less "# a(t'5'ty "r 'na(t'5'ty: t)'s 's l'-e t'1e t"
l'5e4
Cat-17config-if8'Switch)ort )ort-securit* aging ti#e 60
S'n(e t)e a'n t'1e ("&l0 n"t be s3e('#'e0 'n t)e 3re5'"&s ("11an02 a se3arate
("11an0 nee0s t" be ("n#'&re0 t" s3e('#y t)e a'n t'1e4
On Cat7!
Cat-1'Show )ort-securit*
Secure "ort 0a;Secure<ddr Current<ddr Securit*io$ation Securit* <ction
7Count8 7Count8 7Count8
F0/1 1 1 0 Shutdown
------------------------------------------------------------------------------------------------------
Cat-1'Sh )ort-securit* address
Secure 0ac <ddress !ab$e
------------------------------------------------------------------------
$an 0ac <ddress !*)e "orts Re#aining <ge
7#ins8
------- ----------------- ------- ------- -------------------
1 0014>0c40>f440 Secure1*na#ic Fa0/1 60 718
------------------------------------------------------------------------
Cat-1'Show )ort-securit* interface f0/1
"ort Securit* + &nab$ed
"ort Status + Secure-u)
io$ation 0ode + Shutdown
<ging !i#e + 60 #ins
<ging !*)e + %nacti2it*
SecureStatic <ddress <ging + 1isab$ed
0a;i#u# 0<C <ddresses + 1
!ota$ 0<C <ddresses + 1
Configured 0<C <ddresses + 0
Stic(* 0<C <ddresses + 0
3ast Source <ddress+$an + 0014>0e40>f440+1
Securit* io$ation Count + 0
T" test t)e ("n#'&rat'"n9
On R!
R17config8'int f0/0
R17config-if8'#ac-address 0000>1111>1111
On Cat7!
N"te y"& s)"&l0 re(e'5e t)e #"ll"w'n 1essaes9
02+14+05+ M"0-4-ERRJDISA.LE9 3se(&re75'"lat'"n err"r 0ete(te0 "n *a0+!2
3&tt'n *a0+! 'n err70'sable state
02+14+05+ M"=R!TS&C:R%!L-2-"S&C:R&T%=3<!%=9+ Securit* 2io$ation occurred,
caused b* 0<C address 00004!!!!4!!!! on )ort Fast&thernet0/1>
02+14+06+ M3%9&"R=!=-5-:"1=W9+ L'ne 3r"t"("l "n Inter#a(e *astEt)ernet0+!2
()ane0 state t" 0"wn

02+14+04+ M3%9E-3-:"1=W9+ %nterface Fast&thernet0/1, changed state to down
On Cat7!
Cat-1'Show i) int brie
%nterface %"-<ddress =EU 0ethod Status "rotoco$
$an1 unassigned L&S unset ad#inistrati2e$* down down
*astEt)ernet0+! &nass'ne0 <ES &nset 0"wn 0"wn
On R!
R17config8'%nt F0/0
R17config-if8'9= 0ac-address 0000>1111>1111
On Cat7!
Cat-17config-if8'Shut
Wa't t'll t)e l'ne "es 0"wn t)en enter t)e #"ll"w'n ("11an09

Tas- 3
%n order to )re2ent 0<C f$ooding, configure Cat-2 using the fo$$owing )o$ic*+
"orts that routers R1 B R6 are connected shou$d be configured such that the* on$* a$$ow
one 0<C-address to be detected, if this )o$ic* is 2io$ated, the a))ro)riate switch)ort
shou$d 9=! send an S90" tra) or a s*s$og #essage, but it shou$d ignore a$$ fra#es
co#ing fro# the new$* $earned 0<C address> !he switch shou$d be configured such that
it $earns the 0<C addresses of the routers d*na#ica$$* and con2erts the# to stic(*
secure 0<C addresses>

Lou shou$d use a regu$ar and a s#art )ort #acro to acco#)$ish this tas(>
Cat-27config8'1efine interface-range Router-"orts F0/1 - 6
@T)e ab"5e ("11an0 0e#'nes a rane "# 3"rts "n t)e sw't() an0 na1es t)e1
R"&ter7P"rtsA
Cat-27config8'0acro na#e "ort-Secur
&nter #acro co##ands one )er $ine> &nd with the character VJV>
switch)ort #ode access
switch)ort )ort-securit*
switch)ort )ort-securit* #ac-address stic(*
switch)ort )ort-securit* #a;i#u# 1
switch)ort )ort-securit* 2io$ation )rotect
J
Cat-27config8'
@T)e ab"5e ("n#'&rat'"n ("n#'&res a s1art3"rt 1a(r"4 A s1art3"rt 1a(r" 's
starte0 by t)e 6Fa(r" na1e8 ("11an0 an0 t)en #"ll"we0 by an arb'trary na1e
t)at 's ass'ne0 t" t)e 1a(r"4
On(e t)at ("11an0 's entere02 a 1essae 's 0's3laye0 'n t)e ("11an0 l'ne4 T)'s
1essae tells &s t" &se t)e 6P8 s'n 'n "r0er t" en0 t)'s 1a(r"4
L'ne 3 t" l'ne = ("nta'ns t)e a(t&al ("11an0s t)at t)e 1a(r" w'll e;e(&te4
A s1art3"rt 1a(r" (an be a33l'e0 t" an 'nter#a(e2 'nter#a(e rane2 "r a re&lar
1a(r"4
Lastly t)e S1art3"rt Fa(r" 's a33l'e0 t" t)e re&lar 1a(r"2 as #"ll"ws9
Cat-27config8'%nterface range #acro Router-"orts
Cat-27config-if-range8'0acro a))$* "ort-Secur
On Cat7$
A 6S)"w r&n8 ("11an0 's entere02 1"st "# t)e "&t3&t #r"1 t)'s s)"w ("11an0 's
"1'tte0 an0 "nly t)e 3erta'n'n 3arts are s)"wn9
Cat-2'Show run
-ui$ding configuration>>>
P
1a(r" na1e P"rt7Se(&r
sw't()3"rt 1"0e a((ess
sw't()3"rt 3"rt7se(&r'ty
sw't()3"rt 3"rt7se(&r'ty 1a(7a00ress st'(-y
sw't()3"rt 3"rt7se(&r'ty 1a;'1&1 !
sw't()3"rt 3"rt7se(&r'ty 5'"lat'"n 3r"te(t
P
P
P
interface Fast&thernet0/1
sw't()3"rt 3"rt7se(&r'ty 1a(7a00ress st'(-y 00!=40e=04#%=0
1a(r" 0es(r'3t'"n P"rt7Se(&r
P
sw't()3"rt 3"rt7se(&r'ty 1a(7a00ress st'(-y 00!=45aa04e$%0
P
sw't()3"rt 3"rt7se(&r'ty 1a(7a00ress st'(-y 00!=45,$646a6>
P
sw't()3"rt 3"rt7se(&r'ty 1a(7a00ress st'(-y 00!546$#34!%#0
P
sw't()3"rt 3"rt7se(&r'ty 1a(7a00ress st'(-y 00!=40e%e46a=0
P
sw't()3"rt 3"rt7se(&r'ty 1a(7a00ress st'(-y 00!=45,$646ab0
P
0e#'ne 'nter#a(e7rane R"&ter7P"rts *astEt)ernet0+! 7 6
P
end
N"te 3"rts *0+! ? 6 )a5e t)e 6Sw't()3"rt 3"rt7se(&r'ty 1a(7a00ress st'(-y8 #"ll"we0
by t)e r"&ters FAC a00ress4 I# t)e r"&ters *0+0 'nter#a(e 's 'n 6s)&t0"wn8 1"0e2
t)e s)"w r&n ("11an0 w'll n"t re5eal t)e FAC a00ress "# t)e r"&ter4
T)e 6Sw't()3"rt 3"rt7se(&r'ty 1a(7a00ress st'(-y8 'nter#a(e ("11an0 ("n5erts all
t)e 0yna1'( se(&re FAC a00resses2 'n(l&0'n t)"se t)at were 0yna1'(ally learne0
be#"re st'(-y learn'n was enable02 t" st'(-y se(&re FAC a00resses4 All st'(-y
se(&re FAC a00resses are a00e0 t" t)e r&nn'n ("n#'&rat'"n4 T)e st'(-y se(&re
FAC a00resses 0" n"t a&t"1at'(ally be("1e 3art "# t)e ("n#'&rat'"n #'le2 w)'() 's
t)e start&3 ("n#'&rat'"n &se0 ea() t'1e t)e sw't() restarts4 I# y"& sa5e t)e st'(-y
se(&re FAC a00resses 'n t)e ("n#'&rat'"n #'le2 w)en t)e sw't() restarts2 t)e
'nter#a(e 0"es n"t nee0 t" relearn t)ese a00resses4 I# y"& 0" n"t sa5e t)e st'(-y
se(&re a00resses2 t)ey are l"st4
Tas- %
Cat-2As )orts F0/15 and F0/16 are connected to co#)an*As web and e-#ai$ ser2er> !hese
)orts shou$d be configured in 3<9 55> &nsure that these )orts canAt co##unicate with
each other> Lou shou$d 9=! configure "ri2ate 3<9s to acco#)$ish this tas(>
On Cat7$
Cat-27config8'%nterface range F0/15 B 16
Cat-27config-if-range8'Switch)ort #ode access
Cat-27config-if-range8'Switch access 2$an 55
Cat-2'Show inter f0/15 switch
9a#e+ Fa0/15
Switch)ort+ &nab$ed
<d#inistrati2e 0ode+ static access
=)erationa$ 0ode+ down
<d#inistrati2e !run(ing &nca)su$ation+ negotiate
9egotiation of !run(ing+ =ff
<ccess 0ode 3<9+ 55 7%nacti2e8
!run(ing 9ati2e 0ode 3<9+ 1 7defau$t8
<d#inistrati2e 9ati2e 3<9 tagging+ enab$ed
oice 3<9+ none
<d#inistrati2e )ri2ate-2$an host-association+ none
<d#inistrati2e )ri2ate-2$an #a))ing+ none
<d#inistrati2e )ri2ate-2$an trun( nati2e 3<9+ none
<d#inistrati2e )ri2ate-2$an trun( 9ati2e 3<9 tagging+ enab$ed
<d#inistrati2e )ri2ate-2$an trun( enca)su$ation+ dot1I
<d#inistrati2e )ri2ate-2$an trun( nor#a$ 3<9s+ none
<d#inistrati2e )ri2ate-2$an trun( )ri2ate 3<9s+ none
=)erationa$ )ri2ate-2$an+ none
!run(ing 3<9s &nab$ed+ <33
"runing 3<9s &nab$ed+ 2-1001
Ca)ture 0ode 1isab$ed
Ca)ture 3<9s <$$owed+ <33
Pr"te(te09 #alse N"te t)e 3"rt 's n"t 'n 3r"te(te0 1"0e
:n(nown unicast b$oc(ed+ disab$ed
:n(nown #u$ticast b$oc(ed+ disab$ed
<))$iance trust+ none
Cat-2'
On Cat7$
%nterface range F0/15 B 16
Switch)ort )rotected
9a#e+ Fa0/15
Switch)ort+ &nab$ed
oice 3<9+ none
Pr"te(te09 tr&e T)e 3"rt 's n"w 'n 3r"te(te0 1"0e
N"te a 3r"te(te0 3"rt 0"es n"t #"rwar0 any tra##'( @&n'(ast2 1&lt'(ast2 "r br"a0(astA
t" any "t)er 3"rt t)at 's als" ("n#'&re0 as a 3r"te(te0 3"rt4 Data tra##'( (ann"t be
#"rwar0e0 between 3r"te(te0 3"rts at Layer $ e5en t)"&) t)e 3"rts are 'n t)e sa1e
/LAN4
Tas- 5
Configure Cat-2 such that it )re2ents un(nown unicast or #u$ticast traffic fro# being
forwarded between these two )orts>
On Cat7$
Cat-27config8' interface range f0/15-16
Cat-27config-if-range8' switch)ort b$oc( #u$ticast
Cat-27config-if-range8' switch)ort b$oc( unicast
Cat-27config-if-range8' end
N"te 3"rts *0+!5 an0 *0+!6 are ("n#'&re0 as 3r"te(te0 3"rts2 '# &n-n"wn &n'(ast an0
1&lt'(ast tra##'( 's #"rwar0e0 t" a 3r"te(te0 3"rt2 t)ere ("&l0 be se(&r'ty 'ss&es4 T"
3re5ent &n-n"wn &n'(ast "r 1&lt'(ast tra##'( #r"1 be'n #"rwar0e0 #r"1 "ne 3"rt t"
an"t)er2 #l""0'n "# &n-n"wn &n'(ast "r 1&lt'(ast 3a(-ets s)"&l0 be bl"(-e0 "n t)ese
3"rts4
9a#e+ Fa0/15
Switch)ort+ &nab$ed
oice 3<9+ none
Pr"te(te09 tr&e
Un-n"wn &n'(ast bl"(-e09 enable0 T)e 3"rts are n"w bl"(-'n
Un-n"wn 1&lt'(ast bl"(-e09 enable0 &n-n"wn &n'(ast an0 1&lt'(ast
<))$iance trust+ none
Cat-2'
Tas- 6
!he "Cs that are connected or wi$$ be connected to Cat-1 )ort F0/16 shou$d get
authenticated before the* are a$$owed access to the networ(> !his authentication shou$d
use CS<CS $ocated at 162>165>1>2 using ?cisco@ as the (e*>

On Cat7!
D"t!; 's 0'sable0 "n t)e sw't()
Cat-1'Show dot1;
S*sauthcontro$ D'sable0
1ot1; "rotoco$ ersion 2
Critica$ Reco2er* 1e$a* 100
Critica$ &<"=3 1isab$ed
N"te2 by 0e#a&lt D"t!; 's 0'sable04 Enter t)e #"ll"w'n ("11an0s t" enable D"t!;9
Cat-17config8'1ot1; s*ste#-auth-contro$
@T)e ab"5e ("11an0 enables D"t!; l"bally "n t)e sw't()A
On Cat7!
Cat-1'Show dot1;
S*sauthcontro$ Enable0 T)'s ens&res &s t)at D"t!; 's
1ot1; "rotoco$ ersion 1 enable0 "n t)e sw't() l"bally
Critica$ Reco2er* 1e$a* 100
Critica$ &<"=3 1isab$ed

On Cat7!
Cat-17config8'<aa new-#ode$
@T" enable AAA ser5'(esA
Cat-17config8'aaa authentication dot1; defau$t grou) radius
@T" s3e('#y t)e a&t)ent'(at'"n 1et)"0 l'st2 w)'() 0es(r'bes t)e seE&en(e an0
a&t)ent'(at'"n 1et)"0s t" be E&er'e0 'n "r0er t" a&t)ent'(ate a '5en &serA
Cat-17config8'Radius-ser2er host 162>165>1>2 (e* cisco
@T)'s ("11an0 s3e('#'es t)e Ra0'&s ser5er an0 t)e 3assw"r0A
T" 5er'#y t)at 'ts enable0 "n a '5en 3"rt9
Cat-1'Show dot1; inter F0/16
Cat-1'
N"te D"t!; 's n"t ("n#'&re0 "n t)'s 3"rt yet4 E5en t)"&) D"t!; 's enable0 l"bally "n
t)e sw't()2 'tCs n"t a(t'5ate0 "n a '5en 'nter#a(e4 T" a(t'5ate D"t!; "n a '5en 'nter#a(e2
enter t)e #"ll"w'n ("11an09
Cat-17config-if8'dot1; )ort-contro$ auto
W
M %n2a$id in)ut detected at VWV #ar(er>
N"te t)e err"r 1essae tells &s t)at D"t!; 's n"t a5a'lable "n t)'s 3"rt: t)e reas"n #"r t)'s
err"r 1essae 's be(a&se t)e 3"rt 's 'n Dyna1'( 1"0e an0 D"t!; 's n"t a5a'lable "n 3"rts
t)at are 'n Dyna1'( 1"0e4
In "r0er t" #'; t)'s 3r"ble1 an0 sat's#y t)e reE&'re1ents "# D"t!; ("n#'&rat'"n2 3"rt
*0+!6 1&st be ("n#'&re0 'n a((ess 1"0e as #"ll"ws9
Cat-17config8'%nterface f0/16
Cat-17config-if8'Switch #ode acc
Cat-17config-if8'1ot1; )ort-contro$ auto
N"te2 n" err"r 1essae 's 0's3laye04
T)e 3"rt a&t)ent'(at'"n state (an be ("ntr"lle0 as #"ll"ws9
*"r(e7a&t)"r'Be0+ %t b*)asses the authentication state and a$$ traffic is a$$owed>
*"r(e7Una&t)"r'Be0+ !he )ort re#ains in unauthoriHed state regard$ess of
c$ients atte#)t to get authenticated>
A&t"9 &nab$es 502>1; authentication, the switch identifies the c$ient b* the 0<C
address>
T" 5er'#y t)at 't 's enable0 "n a '5en 3"rt9
Cat-1'Show dot1; interface f0/16
1ot1; %nfo for Fast&thernet0/16
-----------------------------------
"<& O <:!.&9!%C<!=R
P"rtC"ntr"l H AUTO
Contro$1irection O -oth
.ost0ode O S%9/3&T.=S!
Re<uthentication O 1isab$ed
Quiet"eriod O 60
Ser2er!i#eout O 30
Su))!i#eout O 30
Re<uth"eriod O 3600 73oca$$* configured8
Re<uth0a; O 2
0a;ReI O 2
!;"eriod O 30
Rate3i#it"eriod O 0
Tas- =
0ac addresses $earnt d*na#ica$$* b* Cat-1 shou$d not sta* in the 0<C address tab$e if
the* are inacti2e for $onger than 10 #inutes>
.y 0e#a&lt t)e FAC a00resses t)at are 'na(t'5e w'll e;3're w't)'n 300 se("n0s2 t)'s
tas- 's as-'n #"r a !0 1'n&tes t)res)"l02 !0 1'n&tes eE&ates t" 600 se("n0s2 t)e
#"ll"w'n ("11an0 w'll a(("13l's) t)'s tas-9
On Cat7!
Cat-17config8'0ac-address-tab$e aging-ti#e 600
Tas- >
Configure both of the switches such that if a )assword reco2er* is )erfor#ed, the startu)
configuration is de$eted auto#atica$$*>
On ."t) Sw't()es
7config8'9o ser2ice )assword-reco2er*
On ."t) Sw't()es+
Cat-1'Show 2ersion
Cisco %=S Software, C3560 Software 7C3560-<1%"S&R%C&SE6-08, ersion
12>27258S&&2, R&3&<S& S=F!W<R& 7fc18
Co)*right 7c8 1656-2006 b* Cisco S*ste#s, %nc>
Co#)i$ed Fri 25-Fu$-06 12+34 b* *enanh
%#age te;t-base+ 0;00003000, data-base+ 0;01223410
R=0+ -ootstra) )rogra# is C3560 boot $oader
-==!31R+ C3560 -oot 3oader 7C3560-.-==!-08 ersion 12>2725r8S&C, R&3&<S&
S=F!W<R& 7fc48
Cat-1 u)ti#e is 1 hour, 55 #inutes
S*ste# returned to R=0 b* )ower-on
S*ste# i#age fi$e is Gf$ash+/c3560-ad2i)ser2ices(6-#H
01+55+52+ MSLS-5-C=9F%/T%+ Configured fro# conso$e b* conso$e>122-25>S&&2>binG
!his )roduct contains cr*)togra)hic features and is subCect to :nited
States and $oca$ countr* $aws go2erning i#)ort, e;)ort, transfer and
use> 1e$i2er* of Cisco cr*)togra)hic )roducts does not i#)$*
third-)art* authorit* to i#)ort, e;)ort, distribute or use encr*)tion>
%#)orters, e;)orters, distributors and users are res)onsib$e for
co#)$iance with :>S> and $oca$ countr* $aws> -* using this )roduct *ou
agree to co#)$* with a))$icab$e $aws and regu$ations> %f *ou are unab$e
to co#)$* with :>S> and $oca$ $aws, return this )roduct i##ediate$*>
< su##ar* of :>S> $aws go2erning Cisco cr*)togra)hic )roducts #a* be found at+
htt)+//www>cisco>co#/ww$/e;)ort/cr*)to/too$/stIrg>ht#$
%f *ou reIuire further assistance )$ease contact us b* sending e#ai$ to
e;)ortJcisco>co#>
cisco WS-C3560-24!S 7"ower"C4058 )rocessor 7re2ision 108 with 115454E/12250E
b*tes of #e#or*>
"rocessor board %1 C<!1030K.4&
3ast reset fro# )ower-on
1 irtua$ &thernet interface
24 Fast&thernet interfaces
2 /igabit &thernet interfaces
T)e 3assw"r07re("5ery 1e()an's1 's 0'sable04

N"te by 0e#a&lt2 any"ne w't) 3)ys'(al a((ess t" t)e sw't() (an re("5er t)e 3assw"r0
by 'nterr&3t'n t)e b""t 3r"(ess4
W)en t)'s #eat&re 's enable02 t)e b""t 3r"(ess (an be 'nterr&3te0 "nly by aree'n
t" set t)e syste1 ba(- t" t)e 0e#a&lt ("n#'&rat'"n4
W't) 3assw"r0 re("5ery 0'sable02 y"& (an st'll 'nterr&3t t)e b""t 3r"(ess an0
()ane t)e 3assw"r02 b&t t)e ("n#'&rat'"n #'le @("n#'4te;tA an0 t)e /LAN 0atabase
#'le @5lan40atA are 0elete04
Tas- ,
!here are 10 "Cs connected to )ort F0/14 on Cat-2> &nsure that as $ong as one of these
"Cs gets authenticated successfu$$* with the R<1%:S ser2er at 162>165>1>2, the rest of
the "Cs are a$$owed access to the networ(> :se ?Cisco@ as the (e*>
On Cat7$
Cat-27config8'1ot1; s*ste#-auth-contro$
T)e ab"5e ("11an0 enables D"t!; l"bally "n t)e sw't()4
Cat-2'Show dot1;
Sysa&t)("ntr"l H Enable0 D"t!; 's enable0 l"bally "n
1ot1; "rotoco$ ersion O 1 t)e sw't()
Critica$ Reco2er* 1e$a* O 100
Critica$ &<"=3 O 1isab$e
T" 3er#"r1 t)e rest "# t)e ("n#'&rat'"n9
Cat-27config8'<aa new-#ode$
Cat-27config8'aaa authentication dot1; defau$t grou) radius
Cat-27config8'Radius-ser2er host 162>165>1>2 (e* Cisco
Cat-27config-if8'Switch)ort #ode access
Cat-27config-if8'1ot1; )ort-contro$ auto
Cat-2'Show dot1; interface f0/14
-----------------------------------
"<& O <:!.&9!%C<!=R
"ortContro$ O <:!=
H"stF"0e H SINGLEJHOST N"te t)e )"st 1"0e 's
Re<uthentication O 1isab$ed s'nle
Quiet"eriod O 60
CCIE Routing and Switching Catalyst 3560 Lab Pae =0 "# !$%
Ser2er!i#eout O 30
Su))!i#eout O 30
Re<uth0a; O 2
0a;ReI O 2
!;"eriod O 30
Rate3i#it"eriod O 0
W)en ("n#'&r'n D"t!; t)e 0e#a&lt 1"0e 's s'nle )"st 1"0e4 T)e 61&lt'3le )"st8
-eyw"r0 all"ws 1&lt'3le )"sts t" be ("nne(te0 t" t)e sa1e 3"rt an0 "nly "ne )"st nee0s
t" et a&t)ent'(ate0 #"r t)e rest "# t)e )"sts t" be able t" a((ess t)e Et)ernet netw"r-4 I#
n" )"st 's a&t)ent'(ate0 n"ne "# t)e )"sts w'll be able t" a((ess t)e Et)ernet netw"r-4
On Cat7$
Cat-27config8'%nter F0/14
Cat-27config-if8'1ot1; host-#ode #u$ti-host
On Cat7$
Cat-2'Show dot1; interface F0/14
-----------------------------------
"<& O <:!.&9!%C<!=R
"ortContro$ O <:!=
H"stF"0e H FULTIJHOST
Re<uthentication O 1isab$ed
Quiet"eriod O 60
Ser2er!i#eout O 30
Su))!i#eout O 30
Re<uth0a; O 2
0a;ReI O 2
!;"eriod O 30
Rate3i#it"eriod O 0
CCIE Routing and Switching Catalyst 3560 Lab Pae =! "# !$%
Tas- !0
Configure a static 0<C address on Cat-1 for R6As F0/0 interface in 3<9 56 such that if
the switch recei2es fra#es destined to R6As 0<C address, it forwards the fra#es to F0/6>
On R6
T)e Fa( a00ress "# R6
R6'Show int f0/0
Fast&thernet0/0 is u), $ine )rotoco$ is u)
.ardware is 066340 &thernet, address is 00!=45,$646ab0 @b'a 00!=45,$646ab0A
0!: 1500 b*tes, -W 100000 Ebit, 13L 100 usec,
On Cat7!
Cat-17config8'0ac address-tab$e static 0014>5626>6ab0 2$an 56 interface f0/6
Cat-1'Show #ac-address-tab$e static interface f0/6
0ac <ddress !ab$e
-------------------------------------------
$an 0ac <ddress !*)e "orts
---- -------------------- ---------- --------
56 0014>5626>6ab0 S!<!%C Fa0/6
!ota$ 0ac <ddresses for this criterion+ 1
Tas- !!
Configure :nicast 0ac address fi$tering on Cat-1 such that the switch dro)s )ac(ets that
ha2e a source or destination address of 0000>1111>2222> %f a )ac(et is recei2ed in 3<9
1 with this 0<C address as its source or destination, the )ac(et shou$d be dro))ed>
CCIE Routing and Switching Catalyst 3560 Lab Pae =$ "# !$%
On Cat7!
Cat-17config8'0ac address-tab$e static 0000>1111>2222 2$an 1 dro)
Tas- !$
Configure R1 and R2 as fo$$ows+
R"&ter Inter#a(e an0 IP a00ress FAC a00ress
R1 F0/0 O 131>1>1>1 /24 0000>1111>1111
R2 F0/1 O 131>1>1>2 /24 0000>2222>2222
Configure trun(ing between the two switches using )orts F0/16 and F0/20N use an
industr* standard trun(ing )rotoco$>
Configure Cat-1 to )rotect R1 fro# <R" s)oofing attac(> Cat-1 shou$d be configured
such that it interce)ts a$$ <R" reIuests and res)onses on untrusted interface/s, this switch
shou$d then 2erif* that each of these interce)ted )ac(ets has a 2a$id %"-to-0<C address
binding before it u)dates itAs $oca$ <R" cache or forward the )ac(ets to the a))ro)riate
destination, in this case to R1, if the switch detects an in2a$id %"-to-0<C address
binding, it shou$d dro) the )ac(et>
On R!
R17config8'int f0/0
R17config-if8'i) address 131>1>1>1 255>255>255>0
R17config-if8'no shut
On R$
R27config8'int f0/1
R27config-if8'i) address 131>1>1>2 255>255>255>0
R27config-if8'no shut
On ."t) Sw't()es
7config8'interface range f0/16-20
7config-if-range8'switch trun( enca) dot1I
7config-if-range8'switch #ode trun(
T)e last ste3 's t" ("n#'&re DAI @Dyna1'( ARP Ins3e(t'"nA2 DAI 's &se0 t" a5"'0
ARP s3""#'n atta(-2 DAI (an be &se0 t" 5al'0ate ARP 3a(-ets 'n a netw"r-4 DAI
'nter(e3ts2 l"s an0 0's(ar0s ARP 3a(-ets w't) 'n5al'0 IP7t"7FAC a00ress b'n0'ns4
T)'s #eat&re (an 3re5ent 1an7'n7t)e71'00le atta(-s4
DAI 0eter1'nes t)e 5al'0'ty "# an ARP 3a(-et base0 "n 5al'0 IP7t"7FAC a00ress
b'n0'ns st"re0 'n DHCP sn""3'n b'n0'ns 0atabase2 '# a DHCP ser5er 's n"t
a5a'lable2 &ser ("n#'&re0 ARP a((ess7l'st (an be &se0 t" 5al'0ate t)e ARP 3a(-ets4
T" Test be#"re t)e DAI ("n#'&rat'"n9
R2'"ing 131>1>1>1
PPPPP
On R!
R1'Show i) ar)
"rotoco$ <ddress <ge 7#in8 .ardware <ddr !*)e %nterface
%nternet 131>1>1>2 3 0000>2222>2222 <R"< Fast&thernet0/0
%nternet 131>1>1>1 - 0000>1111>1111 <R"< Fast&thernet0/0
On R$
R2'Show i) ar)
"rotoco$ <ddress <ge 7#in8 .ardware <ddr !*)e %nterface
%nternet 131>1>1>2 - 0000>2222>2222 <R"< Fast&thernet0/1
%nternet 131>1>1>1 5 0000>1111>1111 <R"< Fast&thernet0/1
On Cat7!
Cat-17config8'i) ar) ins)ection 2$an 1
Cat-17config8'i) ar) ins)ection fi$ter !S! 2$an 1 static
Cat-17config8'ar) access-$ist !S!
Cat-17config-ar)-nac$8')er#it i) host 131>1>1>2 #ac host 0000>2222>2222
On R$
R27config8'int f0/1
R27config-if8'no #ac-address 0000>2222>2222
R2'"ing 131>1>1>1
CCIE Routing and Switching Catalyst 3560 Lab Pae =% "# !$%
>>>>>
Success rate is 0 )ercent 70/58
N"te t)e P'n 's n"t s&((ess#&l an0 t)e #"ll"w'n 1essaes w'll a33ear "n Cat7!9
MSWJDAI7%7DHCPJSNOOPINGJDEN<9 ! In5al'0 ARPs @ReEA "n *a0+!,, 2$an 1>
7R0014>5aad>e241/131>1>1>2/0000>0000>00
00/131>1>1>1/03+03+42 :!C 0on 0ar 1 1663S8

ISWJDAI7%7DHCPJSNOOPINGJDEN<9 ! In5al'0 ARPs @ReEA "n *a0+!,, 2$an 1>
7R0014>5aad>e241/131>1>1>2/0000>0000>00
00/131>1>1>1/03+03+44 :!C 0on 0ar 1 1663S8

7R0014>5aad>e241/131>1>1>2/0000>0000>00
00/131>1>1>1/03+03+46 :!C 0on 0ar 1 1663S8

7R0014>5aad>e241/131>1>1>2/0000>0000>00
00/131>1>1>1/03+03+45 :!C 0on 0ar 1 1663S8

7R0014>5aad>e241/131>1>1>2/0000>0000>00
00/131>1>1>1/03+03+50 :!C 0on 0ar 1 1663S8
N"te t)e err"r 1essae tells &s t)at 't re(e'5e0 an 'n5al'0 Ar3 reE&est "n 3"rt *0+!,2
3"rt *0+!, 's t)e tr&n- 3"rt t)r"&) w)'() R$ 's #"&n04
T" test t)e ("n#'&rat'"n2 t)e 61a(7a00ress 00004$$$$4$$$$8 ("11an0 's re7entere0
"n R$9
On R$
R27config8'int f0/1
R2'"ing 131>1>1>1
>>>>>
N"te t)e #"ll"w'n 1essae 's 0's3laye0 "n Cat7!9
ISWJDAI7%7DHCPJSNOOPINGJDEN<9 ! In5al'0 ARPs @ResA "n *a0+!, 2$an 1>
7R0000>1111>1111/131>1>1>1/0000>2222>222
2/131>1>1>2/03+12+34 :!C 0on 0ar 1 1663S8

7R0000>1111>1111/131>1>1>1/0000>2222>222
2/131>1>1>2/03+12+36 :!C 0on 0ar 1 1663S8

7R0000>1111>1111/131>1>1>1/0000>2222>222
2/131>1>1>2/03+12+35 :!C 0on 0ar 1 1663S8

7R0000>1111>1111/131>1>1>1/0000>2222>222
2/131>1>1>2/03+12+40 :!C 0on 0ar 1 1663S8
7R0000>1111>1111/131>1>1>1/0000>2222>222
2/131>1>1>2/03+12+42 :!C 0on 0ar 1 1663S8
N"te t)'s 1essae tells &s t)at 't 'nter(e3te0 an 'n5al'0 ARP res3"nse #r"1 *0+!2
3"rt *0+! 's t)e 3"rt t)at R! 's ("nne(te0 t"4 T)'s 1eans t)at t)e 3er1't l'ne 'n t)e
ar3 a((ess7l'st "nly 3er1'tte0 a 5al'0 IP7t"7FAC #"r R$ an0 n"t R!2 t)ere#"re2 w)en
R! res3"n0e02 t)e )'00en l'ne 'n t)e a((ess7l'st @'13l'('t 0eny allA 'nter(e3te0 an0
bl"(-e0 t)e ARP res3"nses #r"1 R!4
T" test t)'s ("n0't'"n2 a 3er1't state1ent 's a00e0 t" t)e ar3 a((ess7l'st #"r R! as
#"ll"ws9
On Cat7!
Cat-17config8'ar) access-$ist !S!
Cat-17config-ar)-nac$8')er#it i) host 131>1>1>1 #ac host 0000>1111>1111
On R$
R2'"ing 131>1>1>1
>PPPP
In "r0er t" test t)e ("n#'&rat'"n #&rt)er t)e FAC a00ress "# R$ 's ()ane0 ba(- t"
'tCs 0e#a&lt 5al&e as #"ll"ws9
On R$
R27config8'int f0/1
R27config-if8'no #ac-address 0000>2222>2222
R27config-if8'Shut
Wa't #"r t)e 'nter#a(e t" " 0"wn2 t)en enter t)e #"ll"w'n9
R27config-if8'no Shut
<"& s)"&l0 et t)e 6'n5al'0 ARP reE&est "n *0+!, 1essae4 T" see t)e err"r ("&nter
'n(re1ent9
On Cat7!
Cat-1'Show i) ar) ins)ection statistics
$an Forwarded 1ro))ed 1.C" 1ro)s <C3 1ro)s
------ --------------- ----------- ----------------- ---------------
1 36 => 6$ 16
$an 1.C" "er#its <C3 "er#its Source 0<C Fai$ures
------ -------------------- ----------------- ----------------------------
1 0 36 0
$an 1est 0<C Fai$ures %" a$idation Fai$ures %n2a$id "rotoco$ 1ata
------ -------------------------- ---------------------------- ---------------------------
1 0 0 0
On R$
R2'"ing 131>1>1>1
>>>>>
On Cat7!
Cat-1'Show i) ar) ins)ection statistics
$an Forwarded 1ro))ed 1.C" 1ro)s <C3 1ro)s
------ --------------- ----------- ----------------- ---------------
CCIE Routing and Switching Catalyst 3560 Lab Pae == "# !$%
1 36 >3 6= 16
$an 1.C" "er#its <C3 "er#its Source 0<C Fai$ures
------ -------------------- ----------------- ----------------------------
1 0 36 0
$an 1est 0<C Fai$ures %" a$idation Fai$ures %n2a$id "rotoco$ 1ata
------ -------------------------- ---------------------------- ---------------------------
1 0 0 0
Tas- !3
%n order to )re2ent a 1oS attac( on Cat-1 )ort F0/23, the nu#ber of inco#ing <R"
)ac(ets shou$d be rate-$i#ited to 10 ""S> !he F0/23 interface shou$d #onitor for a high
rate of <R" )ac(ets e2er* 2 seconds>
Enter t)e #"ll"w'n ("11an0 t" see t)e 0e#a&lt sett'ns9
On Cat7!
Cat-1'Show i) ar) ins)ection interfaces
%nterface !rust State Rate 7))s8 -urst %nter2a$
--------------- ----------- ---------- --------------
Fa0/1 :ntrusted 15 1
On Cat7!
Cat-17config8'int f0/23
Cat-17config-if8'i) ar) ins)ection $i#it rate 10 burst inter2a$ 2
T" 5er'#y t)e ("n#'&rat'"n
On Cat7!
Cat-1'Show i) ar) ins)ection interfaces
CCIE Routing and Switching Catalyst 3560 Lab Pae => "# !$%
%nterface !rust State Rate 7))s8 -urst %nter2a$
--------------- ----------- ---------- --------------
>
>
*a0+$3 Untr&ste0 !0 $

Tas- !%
Configure Cat-1 )ort F0/1 to den* inco#ing <))$e!a$(, <))$e!a$( <R", 1&Cnet "hase
%, &ther t*)e 6000 and &ther t*)e 5042 traffic, this )ort shou$d )er#it a$$ other t*)es of
traffic>
On Cat7!
Cat-17config8'#ac access-$ist e;tended !&S!
Cat-17config-e;t-#ac$8'den* an* an* <<R"
Cat-17config-e;t-#ac$8'den* an* an* <))$e!a$(
Cat-17config-e;t-#ac$8'den* an* an* decnet-i2
Cat-17config-e;t-#ac$8'den* an* an* et*)e-6000
Cat-17config-e;t-#ac$8'den* an* an* et*)e-5042
Cat-17config-e;t-#ac$8')er#it an* an*
Cat-17config-e;t-#ac$8'e;it
Cat-17config8'int f0/1
Cat-17config-if8'#ac access-grou) !&S! in
Et)er ty3e 6000 's DEC &nass'ne02 e;3er'1ental
Et)er ty3e >0%07>0%$ DEC &nass'ne0
*"r a ("13lete l'st "# Et)er ty3es 5's't t)e #"ll"w'n webs'te9
)tt39++www4&a4e0&+Q&(ns+lans+t(3'3se1+#ra1e4ty3e4#'el04)t1l
Fa( a((ess7l'sts (an be &se0 t" #'lter 'n("1'n layer $ tra##'( ty3e2 a E&est'"n 1ar-
a#ter t)e se("n0 any ("11an0 re5eals all t)e tra##'( ty3es t)at (an be #'ltere04
A layer $ 'nter#a(e (an "nly )a5e "ne 1a( a((ess7l'st a33l'e02 '# t)e se("n0 FAC
a((ess7l'st 's a33l'e02 't w'll "5err'0e t)e 3re5'"&s "ne4
A FAC a((ess7l'st ta-es 3re(e0en(e "5er 'n3&t layer 3 a((ess7l'st a33l'e0 t" a /LAN
'nter#a(e an0+"r a /LAN 1a3 a33l'e0 t" a '5en /LAN4

CCIE Routing and Switching Catalyst 3560 Lab Pae =, "# !$%
Tas- !6
Configure a 3<9 #a) to i#)$e#ent the fo$$owing )o$ic* for 3<9 2+
1ro) a$$ %" co##unication between R1 and R2>
1ro) a$$ :1" co##unication for e;isting and future hosts in this 3<9>
1ro) !C" co##unication on$* between hosts R3 and R4>
1ro) a$$ %/0" )ac(ets
1ro) 0<C )ac(ets fro# hosts 0000>1111>2222 and 0000>1111>3333
1ro) 0<C )ac(ets with 1&Cnet-% or ines-i) )rotoco$s
Forward a$$ other %" and 9=9-%" traffic
T)e #'rst ste3 's t" wr'te t)e a((ess7l'sts9
Cat-17config8'i) access-$ist e;tended R1-2
Cat-17config-e;t-nac$8')er#it i) host 131>1>1>1 host 131>1>1>2
Cat-17config-e;t-nac$8')er#it i) host 131>1>1>2 host 131>1>1>1
N"te w)en t)'s a((ess7l'st 's re#eren(e0 by t)e /LAN a((ess71a32 t)e a(t'"n s)"&l0
be 0r"32 re1e1ber t)at any 3er1't state1ent 'n t)e a((ess7l'st w'll be 0r"33e04
Cat-17config8'i) access-$ist e;tended :1"
Cat-17config-e;t-nac$8')er#it :1" an* an*
Cat-17config8'i) access-$ist e;tended !C"
Cat-17config-e;t-nac$8')er#it tc) host 131>1>1>3 host 131>1>1>4
Cat-17config-e;t-nac$8')er#it tc) host 131>1>1>4 host 131>1>1>3
Cat-17config8'i) access-$ist e;tended %/0"
Cat-17config-e;t-nac$8')er#it ig#) an* an*
Cat-17config8'#ac access-$ist e;tended 0<C-forward
Cat-17config-e;t-#ac$8'"er#it host 0000>1111>2222 an*
Cat-17config-e;t-#ac$8'"er#it host 0000>1111>3333 an*
Cat-17config8'#ac access-$ist e;tended "rotoco$-forward
Cat-17config-e;t-#ac$8'"er#it an* an* decnet-i2
Cat-17config-e;t-#ac$8'"er#it an* an* 2ines-i)

T)e ne;t ste3 's t" ("n#'&re a /LAN a((ess71a3 an0 s3e('#y t)e a(t'"n t" be ta-en
base0 "n t)e reE&'re0 3"l'(y9
Cat-17config8'2$an access-#a) !S! 10
Cat-17config-access-#a)8'#atch i) addr R1-2
Cat-17config-access-#a)8'action dro)
Cat-17config-access-#a)8'e;it
CCIE Routing and Switching Catalyst 3560 Lab Pae >0 "# !$%
Cat-17config-access-#a)8'#atch i) addr :1"
Cat-17config-access-#a)8'#atch i) addr !C"
Cat-17config-access-#a)8'#atch i) addr %/0"
Cat-17config-access-#a)8'#atch #ac address 0<C-forward
Cat-17config-access-#a)8'#atch #ac address "rotoco$-forward
Cat-17config-access-#a)8'action forward
T)e last ste3 's t" a33ly t)e /LAN a((ess71a3 t" t)e reE&este0 /LAN9
Cat-17config8'$an fi$ter !S! 2$an-$ist 2
On Cat7!
Cat-1'Show 2$an fi$ter access-#a) !S!
3<9 0a) !S! is fi$tering 3<9s+
2
Cat-1'Show 2$an access-#a)
$an access-#a) G!S!G 10
0atch c$auses+
CCIE Routing and Switching Catalyst 3560 Lab Pae >! "# !$%
i) address+ R1-2
<ction+
dro)
0atch c$auses+
i) address+ :1"
<ction+
dro)
0atch c$auses+
i) address+ !C"
<ction+
dro)
0atch c$auses+
i) address+ %/0"
<ction+
dro)
0atch c$auses+
#ac address+ 0<C-forward
<ction+
dro)
0atch c$auses+
#ac address+ "rotoco$-forward
<ction+
dro)
0atch c$auses+
<ction+
Forward

Tas- !=
&rase the startu) configuration, de$ete the 2$an>dat and re$oad the switches before
)roceeding to the ne;t $ab>
CCIE Routing and Switching Catalyst 3560 Lab Pae >$ "# !$%
Tas- !
!he first switch shou$d be configured with a hostna#e of SW-1 and the second switch
shou$d be configured with a hostna#e of SW-2
On t)e *'rst Sw't()
.ostna#e SW-1
.ostna#e SW-2
Tas- $
<ssign %" addressing to the interface of the routers using the fo$$owing chart and ensure
that these routers can )ing each other+
R"&ter Inter#a(e IP a00ress an0 S&bnet 1as-
R1 F0/0 200>1>1>1 /24
R2 F0/0 200>1>1>2 /24
R3 F0/0 200>1>1>3 /24
R4 F0/1 200>1>1>4 /24
R5 F0/1 200>1>1>5 /24
R6 F0/1 200>1>1>6 /24
--1 F0/0 200>1>1>10 /24
On R!
%nt F0/0
%) address 200>1>1>1 255>255>255>0
9o shut
On R$
%nt F0/0
Lab 3
Pr'5ate /LANs
%) address 200>1>1>2 255>255>255>0
9o shut
On R3
%nt F0/0
%) address 200>1>1>3 255>255>255>0
9o shut
On R%
%nt F0/1
%) address 200>1>1>4 255>255>255>0
9o shut
On R5
%nt F0/1
%) address 200>1>1>5 255>255>255>0
9o shut
On R6
%nt F0/1
%) address 200>1>1>6 255>255>255>0
9o shut
On ..!
%nt F0/0
%) address 200>1>1>10 255>255>255>0
9o shut
T" test an0 5er'#y t)e ("n#'&rat'"n9
R1'"ing 200>1>1>2
PPPPP
R1'"ing 200>1>1>3
CCIE Routing and Switching Catalyst 3560 Lab Pae >% "# !$%
PPPPP

R1'"ing 200>1>1>4
PPPPP

R1'"ing 200>1>1>5
PPPPP

R1'"ing 200>1>1>6
PPPPP
R1'"ing 200>1>1>10
PPPPP
Tas- 3
Configure trun(ing between SW-1 and SW-2 using )orts F0/16 and F0/20> :se an
industr* standard trun(ing )rotoco$ for this )ur)ose>
On ."t) Sw't()es
%nterface range f0/16-20
Switch trun( enca) dot1I
Switch #ode trun(
On ."t) Sw't()es
SW-1'Show int trun(
Fa0/16 1-4064
Fa0/20 1-4064
Fa0/16 1
Fa0/20 1
Fa0/16 1
Fa0/20 none
SW-2'Show int trun(
Fa0/16 1-4064
Fa0/20 1-4064
Fa0/16 1
Fa0/20 1
Fa0/16 1
Tas- %
Configure the switches such that the )orts that are not used are in ad#inistrati2e$* down
state> :se #ini#u# nu#ber of co##ands for this tas(>
On SW7!
SW-17config8'%nt range F0/4-5,F0/10-15,F0/21-24
SW-17config-if8'Shut
On SW7$
SW-27config8'%nt range F0/1-3,F0/4-F0/15,F0/21-24
SW-27config-if8'Shut
Tas- 5
Configure SW-1 and SW-2 to i#)$e#ent the fo$$owing )o$ic*+
Routers R1, R2 and R5 shou$d be ab$e to )ing and ha2e reachabi$it* to each other>
R2 and R5 shou$d 9=! ha2e reachabi$it* to an* other router in this $ab>
Routers R3, R4 and R1 shou$d be ab$e to )ing and ha2e reachabi$it* to each other>
R3 and R4 shou$d 9=! ha2e reachabi$it* to an* other router in this $ab>
Routers R6 and R1 shou$d be ab$e to )ing and ha2e reachabi$it* to each other> R6
shou$d 9=! ha2e reachabi$it* to an* other router in this $ab>
Routers --1 and R1 shou$d be ab$e to )ing and ha2e reachabi$it* to each other>
--1 shou$d 9=! ha2e reachabi$it* to an* other router in this $ab>
&nsure that R6 and --1 are in the sa#e 3<9, 1= 9=! use switch)ort
)rotected, or <C3s to acco#)$ish an* of these tas(s> Lou shou$d on$* see 4
3<9s created in the out)ut of the ?Show 2$an brief@ co##and>
On ."t) Sw't()es9
7config8'2t) #ode trans)arent

7config8'2$an 10
7config-2$an8')ri2ate-2$an )ri#ar*

7config8'2$an 25
7config-2$an8')ri2ate-2$an co##unit*
7config8'2$an 34
7config-2$an8')ri2ate-2$an co##unit*
7config8'2$an 61
CCIE Routing and Switching Catalyst 3560 Lab Pae >= "# !$%
7config-2$an8')ri2ate-2$an iso$ated
7config8'2$an 10
7config-2$an8')ri2ate-2$an association add 25,34,61
Show 2$an )ri2ate-2$an
"ri#ar* Secondar* !*)e "orts
------- --------- ----------------- ---------------------------------------------
10 25 co##unit*
10 34 co##unit*
10 61 iso$ated
On SW7!
SW-17config8'%nt F0/1
SW-17config-if8' Switch)ort )ri2ate-2$an #a))ing 10 25,34,61
SW-17config-if8' Switch)ort #ode )ri2ate-2$an )ro#iscuous
SW-17config-if8'%nt F0/2
SW-17config-if8'Switch)ort #ode )ri2ate-2$an host
SW-17config-if8'Switch)ort )ri2ate-2$an host-association 10 25

SW-17config-if8'%nt F0/3
SW-17config-if8'switch)ort )ri2ate-2$an host-association 10 34

On SW7$
SW-27config-if8' Switch)ort #ode )ri2ate-2$an host
SW-27config-if8' Switch)ort )ri2ate-2$an host-association 10 34

CCIE Routing and Switching Catalyst 3560 Lab Pae >> "# !$%
SW-27config-if8'switch)ort )ri2ate-2$an host-association 10 61
On SW7$
SW-2'Show 2$an )ri2ate-2$an
------- --------- ----------------- ------
10 25 co##unit* Fa0/5
10 34 co##unit* Fa0/4
10 61 iso$ated Fa0/6
On SW7!
SW-1'Show 2$an )ri2ate-2$an
------- --------- ----------------- ------
10 25 co##unit* Fa0/1, Fa0/2
10 34 co##unit* Fa0/1, Fa0/3
10 61 iso$ated Fa0/1, Fa0/6
On R!
R1'"ing 200>1>1>2
PPPPP

R1'"ing 200>1>1>3
PPPPP
CCIE Routing and Switching Catalyst 3560 Lab Pae >, "# !$%

R1'"ing 200>1>1>4
PPPPP

R1'"ing 200>1>1>5
PPPPP

R1'"ing 200>1>1>6
PPPPP

R1'"ing 200>1>1>10
PPPPP
On R$
R2'"ing 200>1>1>1
PPPPP

R2'"ing 200>1>1>3
>>>>>

R2'"ing 200>1>1>4
CCIE Routing and Switching Catalyst 3560 Lab Pae ,0 "# !$%
>>>>>
R2'"ing 200>1>1>5
PPPPP

R2'"ing 200>1>1>6
>>>>>

R2'"ing 200>1>1>10
>>>>>
On R3
R3'"ing 200>1>1>1
PPPPP

R3'"ing 200>1>1>2
>>>>>

R3'"ing 200>1>1>4
CCIE Routing and Switching Catalyst 3560 Lab Pae ,! "# !$%
PPPPP

R3'"ing 200>1>1>5
>>>>>

R3'"ing 200>1>1>6
>>>>>

R3'"ing 200>1>1>10
>>>>>
On R%
R4'"ing 200>1>1>1
PPPPP

R4'"ing 200>1>1>2
>>>>>

R4'"ing 200>1>1>3
PPPPP
CCIE Routing and Switching Catalyst 3560 Lab Pae ,$ "# !$%
R4'"ing 200>1>1>5
>>>>>

R4'"ing 200>1>1>6
>>>>>

R4'"ing 200>1>1>10
>>>>>
On R5
R5'"ing 200>1>1>1
PPPPP

R5'"ing 200>1>1>2
PPPPP

R5'"ing 200>1>1>3
>>>>>

R5'"ing 200>1>1>4
>>>>>
R5'"ing 200>1>1>6
>>>>>

R5'"ing 200>1>1>10
>>>>>
On R6
R6'"ing 200>1>1>1
PPPPP

R6'"ing 200>1>1>2
>>>>>

R6'"ing 200>1>1>3
>>>>>

R6'"ing 200>1>1>4
CCIE Routing and Switching Catalyst 3560 Lab Pae ,% "# !$%
>>>>>

R6'"ing 200>1>1>5
>>>>>

R6'"ing 200>1>1>10
>>>>>
On ..!
--1'"ing 200>1>1>1
PPPPP

--1'"ing 200>1>1>2
>>>>>

--1'"ing 200>1>1>3
>>>>>

--1'"ing 200>1>1>4
>>>>>

--1'"ing 200>1>1>5
>>>>>

--1'"ing 200>1>1>6
>>>>>

Tas- 6
&rase the startu) config and re$oad the routers before )roceeding to the ne;t tas(>
35607NOS
Answers
CCIE Routing and Switching Catalyst 3560 Lab Pae ,= "# !$%
SW-1 SW-2
R1
F0/0 F0/1
R2
F0/0 F0/1
R3
R3
F0/0 F0/1

R4

F0/0 F0/1

R5

F0/0 F0/1

R6
F0/0 F0/1

CCIE Routing and Switching Catalyst 3560 Lab Pae ,> "# !$%
*0+!
*0+$
*0+3
*0+%
*0+5
*0+6
*0+!,
*0+$0

*0+!
*0+$
*0+3
*0+%
*0+5
*0+6
*0+!,
*0+$0

CCIE Routing and Switching Catalyst 3560 Lab Pae ,, "# !$%
Tas- !
Configure the hostna#e of the four Cata$*st switches as fo$$ows+
First Switch O SW-1
Second Switch O SW-2
!hird Switch O SW-3
Forth Switch O SW-4
On t)e *'rst Sw't()
On t)e T)'r0 Sw't()
On t)e *"rt) Sw't()
Tas- $
Configure SW-3 based on the fo$$owing %ngress Q=S )o$ic*+
1SC" 2a$ues of 00 B 20 shou$d be #a))ed to Queue 1 thresho$d 2 with a W!1
thresho$d of 50 )ercent>
Lab %
3560 NOS 7 I
It 's always a ""0 '0ea t" see t)e 0e#a&lt 1a33'n be#"re any ()anes2 t)'s (an be 0"ne by enter'n
t)e #"ll"w'n ("11an09
SW-3'Show #$s Ios #a)s dsc)-in)ut-I
1sc)-in)utI-thresho$d #a)+
d1 +d2 0 1 2 3 4 5 6 4 5 6
-----------------------------------------------------------------------------------
0 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01
1 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01
2 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01
3 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01
4 + 02-01 02-01 02-01 02-01 02-01 02-01 02-01 02-01 01-01 01-01
5 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01
6 + 01-01 01-01 01-01 01-01
N"te t)e "&t3&t 0's3lays t)e 0e#a&lt 1a33'n2 t" s&11ar'Be t)e "&t3&t9
DSCP 5al&es "# 00 ? 3, are 1a33e0 t" N&e&e ! an0 t)res)"l0 ! @0!70!A
DSCP 5al&es "# %0 ? %= are 1a33e0 t" N&e&e $ an0 t)res)"l0 ! @0$70!A
DSCP 5al&es "# %> ? 63 are 1a33e0 t" N&e&e ! an0 t)res)"l0 ! @0!70!A
T" ("n#'&re t)e 3"l'(y2 t)e DSCP 1a33'n 's ("n#'&re0 #'rst2 as #"ll"ws9
SW-37config8' '#$s Ios srr-Iueue in)ut dsc)-#a) Iueue 1 thresho$d 2 0 1 2 3 4 5 6 4
SW-37config8' '#$s Ios srr-Iueue in)ut dsc)-#a) Iueue 1 thresho$d 2 16 14 15 16 20
SW-37config8' '#$s Ios srr-Iueue in)ut dsc)-#a) Iueue 1 thresho$d 1 45 46 44 45 46 50
SW-37config8' '#$s Ios srr-Iueue in)ut dsc)-#a) Iueue 2 thresho$d 1 56
SW-37config8' '#$s Ios srr-Iueue in)ut dsc)-#a) Iueue 2 thresho$d 2 60 61 62 63
CCIE Routing and Switching Catalyst 3560 Lab Pae !0! "# !$%
On SW3
SW-3'Show #$s Ios #a)s dsc)-in)ut-I
1sc)-in)utI-thresho$d #a)+
d1 +d2 0 1 2 3 4 5 6 4 5 6
-----------------------------------------------------------------------------------
0 + 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$
1 + 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$ 0!70$
2 + 0!70$ 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01
3 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01
4 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01
5 + 01-01 0$70! 0$70! 0$70! 0$70! 0$70! 0$70! 0$70! 0$70! 0$70!
6 + 02-02 02-02 02-02 02-02
T)e se("n0 ste3 's t" ass'n t)e we')ts base0 "n t)e 3"l'(y9
T" see t)e 0e#a&lt 5al&es be#"re t)e ("n#'&rat'"n9
On SW73
SW-3'Show #$s Ios in)ut-Iueue
N&e&e 9 ! $
----------------------------------------
buffers + 60 10
bandwidth+ 4 4
)riorit* + 0 10
t)res)"l0!9 !00 !00
t)res)"l0$9 !00 !00
T" ()ane t)e 5al&es base0 "n t)e NOS 3"l'(y9
SW-37config8'#$s Ios srr-Iueue in)ut thresho$d 1 45 50
SW-37config8'#$s Ios srr-Iueue in)ut thresho$d 2 30 45
CCIE Routing and Switching Catalyst 3560 Lab Pae !0$ "# !$%
N&e&e 9 ! $
---------------------------------------- N&e&e ! t)res)"l0 ! & $Cs
buffers + 60 10 3er(entae
bandwidth+ 4 4
)riorit* + 0 10
t)res)"l0!9 =5 30
t)res)"l0$9 50 =5
N&e&e $ t)res)"l0 ! & $Cs 3er(entae
Tas- 3
Configure SW-3 such that 60 )ercent of the buffer s)ace is a$$ocated to the ingress Queue
1 and 40 )ercent is a$$ocated to ingress Queue 2>
On SW73
N"te t)e b&##er s3a(e ("ntr"ls t)e a1"&nt "# 0ata t)at (an be b&##ere0 be#"re
3a(-ets are 0r"33e04
T)e 0e#a&lt 5al&es are as #"ll"ws9
N&e&e 9 ! $
----------------------------------------------
b&##ers 9 ,0 !0
bandwidth+ 4 4
)riorit* + 0 10
thresho$d1+ 45 30
thresho$d2+ 50 45
N"te t)e ab"5e "&t3&t re5eals t)at ,0 3er(ent "# t)e b&##ers are all"(ate0 t" N&e&e !
an0 !0 3er(ent "# t)e b&##ers are all"(ate0 t" N&e&e $4
Enter t)e #"ll"w'n ("11an0 t" ()ane t)e all"(at'"n 3er(entae base0 "n t)e NOS
3"l'(y+
On SW73
SW-37config8'#$s Ios srr-Iueue in)ut buffers 60 40
N&e&e 9 ! $
----------------------------------------------
b&##ers 9 60 %0
bandwidth+ 4 4
)riorit* + 0 10
thresho$d1+ 45 30
thresho$d2+ 50 45
Tas- %
SW-3 shou$d be configured such that 35 )ercent of the ingress bandwidth is assigned to
Queue 1 and 45 )ercent of the ingress bandwidth is assigned to Queue 2> !he rest of the
bandwidth shou$d be a$$ocated to traffic that needs to be e;)edited such as 2oice>
T)e ban0w'0t) ar&1ent (an be &se0 t" s3e('#y )"w 1&() "# t)e a5a'lable
ban0w'0t) 's all"(ate0 between t)e tw" 'nress E&e&es an0 t)e 3r'"r'ty E&e&e4
SRR ser5'(es t)e 3r'"r'ty E&e&e #"r 'tCs ("n#'&re0 we')t as s3e('#'e0 by t)e
6ban0w'0t)8 -eyw"r02 'n t)'s (ase 't s)"&l0 be ("n#'&re0 t" be $0 3er(ent4 SRR
t)en s)ares t)e re1a'n'n ban0w'0t) @In t)'s (ase >0 3er(entA w't) b"t) 'nress
E&e&es an0 ser5'(es t)e1 as s3e('#'e0 by t)e we')t ("n#'&re02 'n t)'s (ase 35I #"r
E&e&e ! an0 %5I #"r E&e&e $4
T" see t)e 0e#a&lt ban0w'0t) all"(at'"n #"r t)e tw" E&e&es9
On SW73
N&e&e 9 ! $
----------------------------------------------
buffers + 60 10
ban0w'0t)9 % %
3r'"r'ty 9 0 !0
thresho$d1+ 45 30
thresho$d2+ 50 45
T" ("n#'&re t)e NOS 3"l'(y9
CCIE Routing and Switching Catalyst 3560 Lab Pae !0% "# !$%
On SW73
SW-37config8'#$s Ios srr-Iueue in)ut bandwidth 35 45
SW-37config8'#$s Ios srr-Iueue in)ut )riorit*-Iueue 1 bandwidth 20
On SW73
N&e&e 9 ! $
----------------------------------------------
buffers + 60 40
ban0w'0t)9 35 %5
3r'"r'ty 9 $0 0
thresho$d1+ 45 30
thresho$d2+ 50 45
Tas- 5
Configure SW-4As &gress Queues based on the fo$$owing )o$ic*+
1SC" 2a$ues of 00 B 04 shou$d be #a))ed to Queue 1 thresho$d 1
T" see t)e 0e#a&lt 1a33'n table9
SW-4'Show #$s Ios #a)s dsc)-out)ut-I
1sc)-out)utI-thresho$d #a)+
d1 +d2 0 1 2 3 4 5 6 4 5 6
---------------------------------------------------------------------------------------------
0 + 0$70! 0$70! 0$70! 0$70! 0$70! 0$70! 0$70! 0$70! 0$70! 0$70!
1 + 0$70! 0$70! 0$70! 0$70! 0$70! 0$70! 03-01 03-01 03-01 03-01
2 + 03-01 03-01 03-01 03-01 03-01 03-01 03-01 03-01 03-01 03-01
3 + 03-01 03-01 0%70! 0%70! 0%70! 0%70! 0%70! 0%70! 0%70! 0%70!
4 + 01-01 01-01 01-01 01-01 01-01 01-01 01-01 01-01 0%70! 0%70!
5 + 0%70! 0%70! 0%70! 0%70! 0%70! 0%70! 0%70! 0%70! 0%70! 0%70!
6 + 0%70! 0%70! 0%70! 0%70!
N"te DSCP 5al&es 00 ? !5 are ass'ne0 t" N&e&e $ t)res)"l0 !4
DSCP 5al&es !6 ? 3! are ass'ne0 t" N&e&e 3 t)res)"l0 !
DSCP 5al&es 3$ ? 3, are ass'ne0 t" N&e&e % t)res)"l0 !
DSCP 5al&es %0 ? %= are ass'ne0 t" N&e&e ! t)res)"l0 !
DSCP 5al&es %> ? 63 are ass'ne0 t" N&e&e % t)res)"l0 !
Enter t)e #"ll"w'n ("11an0s t" ()ane t)ese 5al&es an0 ass'n1ents 3er reE&'re0 NOS 3"l'(y9
SW-47config8'#$s Ios srr-Iueue out)ut dsc)-#a) Iueue 1 thresho$d 1 0 1 2 3 4 5 6 4
On SW7%
SW-4'Show #$s Ios #a)s dsc)-out)ut-I
1sc)-out)utI-thresho$d #a)+
d1 +d2 0 1 2 3 4 5 6 4 5 6
---------------------------------------------------------------------------------------------
0 + 0!70! 0!70! 0!70! 0!70! 0!70! 0!70! 0!70! 0!70! 01-02 01-02
1 + 01-02 01-02 01-02 01-02 01-02 01-02 0$70! 0$70! 0$70! 0$70!
2 + 0$70! 0$70! 0$70! 0$70! 02-02 02-02 02-02 02-02 02-02 02-02
3 + 02-02 02-02 0370! 0370! 0370! 0370! 0370! 0370! 0370! 0370!
4 + 03-02 03-02 03-02 03-02 03-02 03-02 03-02 03-02 0%70! 0%70!
5 + 0%70! 0%70! 0%70! 0%70! 0%70! 0%70! 04-02 04-02 04-02 04-02
6 + 04-02 04-02 04-02 04-02
Tas- 6
Configure the &gress buffers for )ort F0/14 as fo$$ows+
Queue 1 O 40, Queue 2 O 20, Queue 3 O 20 and Queue 4 O 20

Enter t)e #"ll"w'n ("11an0 t" see t)e 0e#a&lt b&##er all"(at'"n "n *0+!% 'nter#a(e9
SW-4'Show #$s Ios interface F0/14 buffers
Fast&thernet0/14
N"S 's 0'sable04 W)en N"S 's enable02 #"ll"w'n sett'ns w'll be a33l'e0
!he )ort is #a))ed to Iset + 1
!he a$$ocations between the Iueues are + 25 25 25 25
N"te by 0e#a&lt t)e NOS 's 0'sable02 an0 t)e b&##er all"(at'"n w'll "nly be en#"r(e0
w)en NOS 's enable04 I# an0 w)en NOS 's enable02 by 0e#a&lt ea() N&e&e ets an
eE&al s)are @$5IA "# t)e all"(ate0 b&##ers #"r t)at '5en 'nter#a(e4
In "r0er t" ("n#'&re t)e b&##er all"(at'"n "# t)e 'nter#a(e+s2 a E&e&e7set @! "r $A
1&st be ("n#'&re0 an0 t)en a33l'e0 t" a '5en 'nter#a(e4 T)e 0e#a&lt E&e&e7set t)at
's a33l'e0 t" all 'nter#a(es 's E&e&e7set !2 '# NOS 's enable0 an0 E&e&e7set ! 's
("n#'&re0 #"r b&##er all"(at'"n2 t)e ("n#'&rat'"n w'll a33ly t" all 'nter#a(es2 t" see
t)'s be)a5'"r9
SW-47config8'0$s Ios
SW-4'Show #$s Ios inter f0/14 buff
Fast&thernet0/14
T)e 3"rt 's 1a33e0 t" Eset 9 !
!he a$$ocations between the Iueues are + $5 $5 $5 $5
CCIE Routing and Switching Catalyst 3560 Lab Pae !0= "# !$%
Fast&thernet0/24
Fast&thernet0/24
T" a33ly t)e ("n#'&rat'"n t" E&e&e7set $9
SW-47config8'#$s Ios Iueue-set out)ut $ buffers 40 20 20 20
SW-47config8'do sh #$s Ios inter f0/1 buff
Fast&thernet0/1
Fast&thernet0/14
Fast&thernet0/24
Enter t)e #"ll"w'n ("11an0s t" a33ly t)e E&e&e7set t" 'nter#a(e #0+!%9
SW-47config8'int f0/14
SW-47config-if8'Iueue-set 2
SW-47config-if8'do sh #$s Ios inter f0/14 buff
Fast&thernet0/14
T)e 3"rt 's 1a33e0 t" Eset 9 $
!he a$$ocations between the Iueues are + %0 $0 $0 $0
CCIE Routing and Switching Catalyst 3560 Lab Pae !0> "# !$%
Fast&thernet0/24
Fast&thernet0/1
N"te s'n(e t)e E&e&e7set $ was "nly a33l'e0 t" #0+!%2 't "nly e##e(te0 t)at '5en
'nter#a(e2 t)e "t)er 'nter#a(es are st'll 1a33e0 t" E&e&e7set !4
Enter t)e #"ll"w'n t" test an0 5er'#y t)e ("n#'&rat'"n "# E&e&e7set !9
*'rst re1"5e t)e 3re5'"&s ("n#'&rat'"n #"r E&e&e7set $9
SW-47config-if8'%nt f0/14
SW-47config-if8'no Iueue-set 2
SW-47config-if8'e;it
SW-47config8'no #$s Ios Iueue-set out)ut 2 buffers 40 20 20 20
On SW7%
SW-47config8'do sh #$s Ios inter f0/14 buffers
Fast&thernet0/14
Enter t)e #"ll"w'n ("11an0 t" ("n#'&re E&e&e7set !9
SW-47config8'#$s Ios Iueue-set out)ut ! buffers 40 20 20 20
Fast&thernet0/1
CCIE Routing and Switching Catalyst 3560 Lab Pae !0, "# !$%
Fast&thernet0/14
Fast&thernet0/24
IFPORTANT
I# t)e tas- states t" ("n#'&re all 3"rts w't) t)e #"ll"w'n b&##er all"(at'"n
3er(entaes &s'n 1'n'1&1 n&1ber "# ("11an0s2 t)en2 ("n#'&r'n E&e&e7set !
w'll a(("13l's) t)at reE&'re1ent4 .&t '# t)e tas- states t)at "nly "ne 'nter#a(e nee0s
t" be a##e(te02 t)en E&e&e7set $ (an be ("n#'&re0 an0 t)en a33l'e0 t" t)at '5en
'nter#a(e4
Enter t)e #"ll"w'n t" ("n#'&re *0+!%9
SW-47config8'#$s Ios Iueue-set out)ut 2 buffers 40 20 20 20

SW-47config-if8'Iueue-set 2
SW-47config-if8'do sh #$s Ios inter f0/14 buffers
Fast&thernet0/14
T)e 3"rt 's 1a33e0 t" Eset 9 $
CCIE Routing and Switching Catalyst 3560 Lab Pae !!0 "# !$%
Tas- =
Configure F0/14 on SW-4 with the fo$$owing )o$ic*+
Queue 1+
1ro) thresho$d 1 shou$d be configured to 40 )ercent
Reser2ed thresho$d of 100 )ercent
0a;i#u# thresho$d of 200 )ercent
Queue 2+
Reser2ed thresho$d of 100 )ercent
0a;i#u# thresho$d of 300 )ercent
Queue 3 and 4 shou$d be configured to their defau$t 2a$ues
T" see t)e 0e#a&lt sett'ns9
SW-4'Show #$s Ios Iueue-set 1
Queueset+ 1
N&e&e 9 ! $ 3 %
-------------------------------------------------
buffers + 40 20 20 20
thresho$d1+ 100 200 100 100
thresho$d2+ 100 200 100 100
reser2ed + 50 50 50 50
#a;i#u#+ 400 400 400 400
T)e #'rst l'ne 0's3lays t)e b&##er all"(at'"n "# t)'s E&e&e7set4
T)e se("n0 an0 t)e t)'r0 l'ne '0ent'#y t)e t)res)"l0s ! an0 $4 T)e 0r"3 t)res)"l0s
5al&es are a 3er(entae "# t)e N&e&eCs all"(ate0 1e1"ry s3e('#'e0 by t)e #'rst l'ne
@T)'s (an be ("n#'&re0 &s'n t)e 61ls E"s E&e&e7set "&t3&t $ b&##ers8 ("11an0
T)e reser5e0 1e1"ry an0 1a;'1&1 1e1"ry all"(at'"n 's 0's3laye0 'n l'nes % an0
54
Enter t)e #"ll"w'n ("11an0s t" ("n#'&re t)'s tas-9
SW-47config8'#$s Ios Iueue-set out)ut 2 thresho$d 1 40 60 100 200
SW-47config8'#$s Ios Iueue-set out)ut 2 thresho$d 2 30 40 100 300
CCIE Routing and Switching Catalyst 3560 Lab Pae !!! "# !$%
SW-4'Show #$s Ios Iueue-set 1
Queueset+ 1
N&e&e 9 ! $ 3 %
-------------------------------------------------
buffers + 40 20 20 20
thresho$d1+ %0 30 100 100
thresho$d2+ 60 =0 100 100
reser2ed + !00 !00 50 50
#a;i#u#+ $00 300 400 400
Tas- >
Configure )ort F0/16 on SW-4 such that Queue 1 of this interface o)erates in sha)ed
#ode getting 12>5 )ercent of the bandwidth, whereas, Queues 2, 3 and 4 o)erate in share
#ode, sharing the re#aining bandwidth a#ong the#>
<"& (an ass'n a (erta'n a1"&nt "# ban0w'0t) t" ea() E&e&e &s'n t)e 6wrr7
E&e&e ban0w'0t) s)a3e+s)are8 ("11an04
SRR sen0s 3a(-ets base0 "n t)ese we')ts #r"1 ea() E&e&e4
Eress E&e&es (an be ("n#'&re0 #"r s)a3e0 "r s)are0 we')ts "r b"t)4
.y 0e#a&lt2 we')t ! 's set t" $5 an0 we')ts $ 7 % are set t" 0 an0 t)e E&e&es
are 'n s)are0 1"0e4 We')ts ("ntr"l 3er(entae "# t)e 3"rt t)at 's s)a3e02 "
@Ber"A 1eans t)e ("rres3"n0'n E&e&e "3erates 'n s)are0 1"0e an0 t)e
we')t s3e('#'e0 by t)e 6srr7E&e&e ban0w'0t) s)a3e8 ("11an0 's 'n"re0
an0 t)e we')t s3e('#'e0 w't) 6see7E&e&e ban0w'0t) s)are8 'nter#a(e
("11an0 ("1es 'nt" e##e(t4
S)a3e0 1"0e "5err'0es t)e s)are0 1"0e4
Re1e1ber t)at t)e 'n5erse rat'" @!+we')tA ("ntr"ls t)e s)a3'n ban0w'0t)
#"r a '5en E&e&e4

Enter t)e #"ll"w'n ("11an0 t" see t)e 0e#a&lt ban0w'0t) an0 "3erat'n 1"0e #"r
t)'s 'nter#a(e+
SW-4'Show #$s Ios interface F0/16 Iueueing
Fast&thernet0/16
CCIE Routing and Switching Catalyst 3560 Lab Pae !!$ "# !$%
&gress "riorit* Queue + disab$ed
Sha)ed Iueue weights 7abso$ute8 + 25 0 0 0
Shared Iueue weights + 25 25 25 25
!he )ort bandwidth $i#it + 100 7=)erationa$ -andwidth+100>08
N"te E&e&e7set ! 's a33l'e0 t" t)'s 3"rt2 an0 bes'0es N&e&e !2 t)e rest "# t)e E&e&es
are 'n s)are 1"0e4
SW-47config8'%nt f0/16
SW-47config-if8'srr-Iueue bandwidth sha)e 5 0 0 0
SW-47config-if8'end
SW-4'Show #$s Ios interface F0/16 Iueueing
Fast&thernet0/16
Tas- ,
3i#it the egress bandwidth on F0/16 to 50 )ercent of tota$ bandwidth, 1= 9=! use an*
g$oba$ configuration co##and as )art of the so$ution, *ou shou$d 9=! use the ?rate-
$i#it@ interface co##and for this tas(>
.e#"re ("n#'&r'n t)'s tas-2 t)e 0e#a&lt 5al&e s)"&l0 be ()e(-e09
SW-4'Show #$s Ios inter F0/16 Iueueing
Fast&thernet0/16
T)e 3"rt ban0w'0t) l'1't 9 !00 @O3erat'"nal .an0w'0t)9!0040A
N"te t)e 0e#a&lt 5al&e 's !00 3er(ent2 w)'() 1eans !00 Fb3s2 we (an l'1't t)e &sae "#
t)e ban0w'0t) t" >0 3er(ent &s'n t)e #"ll"w'n 'nter#a(e ("11an09
SW-47config-if8'srr-Iueue bandwidth $i#it 50
SW-47config-if8'end
T)e ab"5e ("11an0 s3e('#'es t)e 3er(entae "# t)e 3"rt s3ee0 t" w)'() t)e 3"rt s)"&l0
be l'1'te0: t)e rane 's !0 ? ,0 3er(ent4
IFPORTANT
.e(a&se t)e )ar0ware a0M&sts t)e l'ne rate 'n 'n(re1ents "# 6 t)e 5al&e 1ay n"t be !00
3er(ent a((&rate>
On SW7%
Fast&thernet0/16
T)e 3"rt ban0w'0t) l'1't 9 >0 @O3erat'"nal .an0w'0t)9>040A
Tas- !0
Configure the Queues for interface F0/15 in shared #ode such that Queue 1 recei2es 10
)ercent, Queue 2 recei2es 20 )ercent, Queue 3 recei2es 30 )ercent and Queue 4 recei2es
40 )ercent of the bandwidth>
In s)are0 1"0e t)e ban0w'0t) 's s)are0 a1"n t)e E&e&es a(("r0'n t" t)e
("n#'&re0 we')t+s
Re1e1ber t)at t)e ban0w'0t) 's &arantee0 b&t n"t l'1'te0 t"2 w)ereas 'n
S)a3e0 1"0e t)e ban0w'0t) 's l'1'te0 t" t)e a1"&nt ("n#'&re04
I# a '5en N&e&e e13t'es an0 0"es n"t reE&'re a s)are "# t)e l'n-2 t)e "t)er
E&e&es (an e;3an0 'nt" t)e &n&se0 ban0w'0t) an0 s)are 't a1"n t)e14
T" see t)e 0e#a&lt 5al&es9
On SW7%
CCIE Routing and Switching Catalyst 3560 Lab Pae !!% "# !$%
Fast&thernet0/15
S)are0 E&e&e we')ts 9 $5 $5 $5 $5
N"te be 0e#a&lt e5ery E&e&e re(e'5es an eE&al a1"&nt "# t)e ban0w'0t)4 Enter t)e
#"ll"w'n ("11an0s t" ()ane t)e 5al&es base0 "n t)e 3"l'(y "# t)'s tas-9
SW-47config-if8'srr-Iueue bandwidth share 10 20 30 40
On SW7%
Fast&thernet0/15
S)are0 E&e&e we')ts 9 !0 $0 30 %0
Tas- !!
Configure )ort F0/16 of SW-4 such that Queue 1 is configured as the e;)edite Iueue, this
wi$$ be used for 2oice traffic>
<"& (an ("n#'&re "ne "# t)e % N&e&es "# a '5en 'nter#a(e as t)e eress
3r'"r'ty E&e&e "r e;3e0'te E&e&e4
E;3e0'te E&e&e 1&st be ser5'(es an0 e13t'e0 be#"re t)e "t)er E&e&es are
ser5'(e04
Re1e1ber t)at N&e&e ! "# a '5en 'nter#a(e w'll always be t)e e;3e0'te
N&e&e #"r eress E&e&es4
On(e 3r'"r'ty E&e&e 's ("n#'&re0: t)e #'rst 5al&e 'n 6srr7E&e&e ban0w'0t)8
("11an0 's 'n"re04
T" ()e(- t)e 0e#a&lt ("n#'&rat'"n9
On SW7%
Fast&thernet0/16
Eress Pr'"r'ty N&e&e 9 0'sable0
T" ("n#'&re t)e 3r'"r'ty N&e&e9
SW-47config-if8')riorit*-Iueue out
On SW7%
Fast&thernet0/16
Eress Pr'"r'ty N&e&e 9 enable0
Tas- !$
=n SW-2 )ort F0/14 configure the a#ount of bandwidth uti$iHation for broadcast traffic
to 50M>
On SW7$
SW-27config8'%nterface F0/14
SW-27config-if8'Stor#-contro$ broadcast $e2e$ 50>00
St"r17("ntr"l (an be &se0 #"r .r"a0(ast2 Un'(ast an0 F&lt'(ast tra##'(2 t)'s
W)en t)e rate "# F&lt'(ast tra##'( e;(ee0s a 3re0e#'ne0 t)res)"l02 all 'n("1'n
tra##'( @.r"a0(ast2 F&lt'(ast an0 Un'(astA 's 0r"33e0 &nt'l t)e le5el "# F&lt'(ast
tra##'( 's 0r"33e0 bel"w t)e t)res)"l0 le5el4 On(e t)'s "((&rs2 "nly t)e S3ann'n7tree
3a(-ets are #"rwar0e04 W)en .r"a0(ast "r Un'(ast t)res)"l0s are e;(ee0e02 tra##'(
's bl"(-e0 #"r "nly t)e ty3e "# tra##'( t)at e;(ee0e0 t)e t)res)"l04
SW-2'Show stor#-contro$ f0/14 broadcast
--------- ------------- ----------- ----------- -----------
Fa0/14 Forwarding 50>00M 50>00M 0>00M

Tas- !3
Configure the CoS 2a$ues in inco#ing )ac(ets on SW-1 to the fo$$owing 1SC" 2a$ues+
C"S DSCP
0, 1, 2, 3 10
4, 5 20
6, 4 30
A 6S)"w E"s 1a3 ("s70s(38 re5eals t)e 0e#a&lt C"S t" DSCP 1a33'n4
CCIE Routing and Switching Catalyst 3560 Lab Pae !!= "# !$%
0$s Ios #a) cos-dsc) 10 10 10 10 20 20 30 30
Tas- !%
Configure SW-2As interna$ %" "recedence to 1SC" #a))ing to be configured based on the
fo$$owing chart+
IP Pre(e0en(e DSCP
0 10
1 15
2 20
3 25
4 30
5 35
6 40
4 45
A 6S)"w 1ls E"s 1a3s '373re(70s(38 re5eals t)e e;'st'n IP Pre(e0en(e t" DSCP
1a33'n
SW-27config8'0$s Ios #a) i)-)rec-dsc) 10 15 20 25 30 35 40 45
N"te t)'s 1a33'n @IP7Pre(e0en(e t" DSCPA 's &se0 t" ()ane t)e IP7Pre(e0en(e
5al&es 'n t)e 'n("1'n 3a(-ets t" a DSCP 5al&e t)at NOS &ses 'nternally t"
3r'"r't'Be t)e tra##'(4
Tas- !5
Configure 1SC" to 1SC" #utation for )ort F0/23 on SW-1 as fo$$ows+

DSCP DSCP
0 - 20 10
21 - 30 20
31 - 40 30
41 - 50 40
51 - 60 50
61 - 63 60
A 6S)"w 1ls E"s 1a3s 0s(371&tat'"n TST8 ("11an0 re5eals t)e e;'st'n DSCP7
1&tat'"n 1a33'n4 DSCP 1&tat'"n 's &se0 w)ere t)ere are tw" NOS 0"1a'ns t)at
are ("n#'&re0 w't) 0'##erent DSCP 0e#'n't'"ns: DSCP 1&tat'"n translates "ne set "#
DSCP 5al&es t" 1at() t)e 0e#'n't'"n "# an"t)er 0"1a'n4 T)'s ("n#'&rat'"n 's
a33l'e0 t" t)e re(e'5'n 3"rt at t)e b"&n0ary "# a NOS a01'n'strat'5e 0"1a'n4
CCIE Routing and Switching Catalyst 3560 Lab Pae !!> "# !$%
T" ("n#'&re DSCP71&tat'"n2 y"& )a5e t" ("n#'&re t)e 3"l'(y an0 t)en a33ly 't t"
an 'nter#a(e2 as #"ll"ws9
SW-17config8'#$s Ios #a) dsc)-#utation !S! 0 1 2 3 4 5 6 4 to 10
SW-17config8'#$s Ios #a) dsc)-#utation !S! 14 15 16 20 to 10
SW-17config8'#$s Ios #a) dsc)-#utation !S! 26 30 to 20
SW-17config8'#$s Ios #a) dsc)-#utation !S! 61 62 63 to 60
SW-17config-if8'#$s Ios dsc)-#utation !S!
On SW7!
SW-1'Show #$s Ios #a)s dsc)-#utation
Ds(370s(3 1&tat'"n 1a39
TST9
d1 + d2 0 1 2 3 4 5 6 4 5 6
----------------------------------------------
0 + 10 10 10 10 10 10 10 10 10 10
1 + 10 10 10 10 10 10 10 10 10 10
2 + 10 20 20 20 20 20 20 20 20 20
3 + 20 30 30 30 30 30 30 30 30 30
4 + 30 40 40 40 40 40 40 40 40 40
5 + 40 50 50 50 50 50 50 50 50 50
6 + 50 60 60 60

Ds(370s(3 1&tat'"n 1a39
De#a&lt DSCP F&tat'"n Fa39
CCIE Routing and Switching Catalyst 3560 Lab Pae !!, "# !$%
d1 + d2 0 1 2 3 4 5 6 4 5 6
---------------------------------------------
0 + 00 01 02 03 04 05 06 04 05 06
1 + 10 11 12 13 14 15 16 14 15 16
2 + 20 21 22 23 24 25 26 24 25 26
3 + 30 31 32 33 34 35 36 34 35 36
4 + 40 41 42 43 44 45 46 44 45 46
5 + 50 51 52 53 54 55 56 54 55 56
6 + 60 61 62 63
Tas- !6
&rase the startu) configuration and re$oad the switches before )roceeding to the ne;t $ab>
CCIE Routing and Switching Catalyst 3560 Lab Pae !$0 "# !$%
Tas- !
Configure the egress Iueues of SW-1As F0/14 as fo$$ows+
Q1 shou$d hand$e a$$ the traffic with a CoS 2a$ue of 0 and 1>
Q2 shou$d hand$e a$$ the traffic with a CoS 2a$ue of 2 and 3>
Q3 shou$d hand$e a$$ the traffic with a CoS 2a$ue of 4
Q4 shou$d hand$e a$$ the traffic with a CoS 2a$ue of 5>
Q1 shou$d ho$d 120 )ac(ets whereas Q2, 3 and 4 shou$d be configured to ho$d the
#a;i#u# nu#ber of )ac(ets in their Queues>
!hese Iueues shou$d be ser2ices with Q1, 2, 3 and 4 with 10M, 20M, 30M and
40M res)ecti2e$*>
On SW7!
SW-17config8'#$s Ios
T)'s ("11an0 enables NOS "n t)e sw't()4
SW-17config8'#$s Ios #in-reser2e 1 120
T)e ab"5e % state1ents ass'n t)e reE&este0 n&1ber "# 3a(-ets t" a '5en
1'n'1&17reser5e7le5els2 'n t)'s ("n#'&rat'"n2 we )a5e ass'ne0 !$0 3a(-ets t"
FRL ! an0 FRLs $2 3 an0 % ea() et !=0 3a(-ets w)'() 's t)e 1a;'1&1 n&1ber "#
3a(-ets t)at (an be ass'ne0 t" a '5en FRL4 On(e t)e FRLs are ("n#'&re02 t)ey
)a5e t" be ass'ne0 t" t)e a33r"3r'ate E&e&es4
SW-17config-if8'wrr-Iueue cos-#a) 1 0 1
SW-17config-if8'wrr-Iueue cos-#a) 2 2 3
SW-17config-if8'wrr-Iueue cos-#a) 3 4
SW-17config-if8'wrr-Iueue cos-#a) 4 5
T)e ab"5e % state1ents are ass'n'n C"S 5al&es t" t)e N&e&es2 'n t)'s ("n#'&rat'"n
N&e&e! w'll be ser5'('n any 3a(-et t)at 's tae0 w't) C"S 5al&es "# 0 an0+"r !2
N&e&e$ w'll be ser5'('n any 3a(-et t)at 's tae0 w't) C"S 5al&es "# $ an0+"r 3 an0
s" #"rt)4
CCIE Routing and Switching Catalyst 3560 Lab Pae !$! "# !$%
Lab 5
S&33le1ental 3550 NOS
T)e #"ll"w'n % ("11an0s are &se0 t" ass'n t)e ("n#'&re0 FRL t" a '5en E&e&e2
'n t)'s ("n#'&rat'"n FRL ! 's ass'ne0 t" N&e&e!2 FRL $ 's ass'ne0 t" N&e&e$2
FRL 3 's ass'ne0 t" N&e&e3 an0 FRL% 's ass'ne0 t" N&e&e%2 as #"ll"ws9
SW-17config-if8'wrr-Iueue #in-reser2e 1 1
SW-17config-if8'wrr-Iueue bandwidth 1 2 3 4
Lastly t)e we')ts are ass'ne0 t" t)e E&e&es2 '# t)'s ("11an0 's n"t ("n#'&re02
ea() N&e&e w'll re(e'5e an eE&al s)are "# t)e ban0w'0t)2 'n t)'s tas- we )a5e
ass'ne0 N&e&e! !0I2 N&e&e$ $0I2 N&e&e3 30I an0 N&e&e% %0I "# t)e
ban0w'0t)4
SW-1'Show #$s Ios interface f0/14 Iueueing
Fast&thernet0/14 N"te str'(t 3r'"r'ty 's n"t enable0
Eress e;3e0'te E&e&e9 0's
wrr bandwidth weights+
Iid-weights
1 B 1
2 B 2
3 - 3 T)ese are t)e we')ts t)at we ("n#'&re0 3er N&e&e>
4 - 4
Cos-Iueue #a)+
cos-Iid
0 - 1
1 - 1
2 - 2
3 - 2
4 - 3 T)'s 3art "# t)e "&t3&t 0's3lays t)e C"S 5al&es t)at
5 - 4 )a5e been ass'ne0 t" a '5en N&e&e
6 - 4
4 - 4
CCIE Routing and Switching Catalyst 3560 Lab Pae !$$ "# !$%
Tas- $
Configure SW-2 to ha2e four egress Iueues one of which shou$d be configured as
e;)edite Iueue>
On SW7$
SW-27config-if8')riorit*-Iueue out
T)e ab"5e ("11an0 enables e;3e0'te N&e&e: "n 3550s t)'s E&e&e w'll always be
N&e&e%4
SW-2'Show #$s Ios int F0/14 Iueueing
Fast&thernet0/14
QoS is disab$ed> =n$* one Iueue is used
W)en N"S 's enable02 #"ll"w'n sett'ns w'll be a33l'e0
&gress e;)edite Iueue+ ena
Iid-weights
1 - 25
2 - 25 N"te NOS 's n"t enable0
3 - 25 l"bally>
4 - 25 when e;)edite Iueue is disab$ed
Cos-Iueue #a)+
cos-Iid
0 - 1
1 - 1
2 - 2
3 - 2
4 - 3
5 - 3
6 - 4
4 B 4
S'n(e t)e 61ls E"s8 ("11an0 's n"t entere0 l"bally2 t)e NOS 's n"t enable04 Enter
t)e #"ll"w'n ("11an0 t" enable NOS9
SW-27config8'#$s Ios
CCIE Routing and Switching Catalyst 3560 Lab Pae !$3 "# !$%
SW-2'Show #$s Ios int F0/14 Iueueing
Fast&thernet0/14
Eress e;3e0'te E&e&e9 ena
Iid-weights N"te str'(t 3r'"r'ty 's enable0
1 - 25
2 - 25
3 - 25
4 - 25 when e;)edite Iueue is disab$ed
Cos-Iueue #a)+
cos-Iid
0 - 1
1 - 1
2 - 2
3 - 2 T)'s 's tell'n &s t)at N&e&e% w'll re(e'5e $5I
4 B 3 "# t)e ban0w'0t) '# e;3e0'te E&e&e'n 's 0'sable0
5 - 3
6 - 4
4 - 4
Tas- 3
&rase the startu) config and re$oad the switches before )roceeding to the ne;t )rotoco$>
CCIE Routing and Switching Catalyst 3560 Lab Pae !$% "# !$%

LAB1 Day1 Switching Answers

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

LAB1 Day1 Switching Answers

Transféré par

Droits d'auteur :

Formats disponibles

CCIE ROUTING & SWITCHING

Vous aimerez peut-être aussi