Lab 9 Tshoot

Laboratorio 9-2 In Synch
Administración de Redes IP
INGENIERA TELEMÁTICA
Presentado por:
Andrea Ascanio, Carlos Ibarra, Auristela Jiménez, Janer Jiménez.
Presentado a:
Ing. Piedad Marchena
2017-3
WWW.ITSA.EDU.CO
INGENIERÍA TELEMÁTICA
Solución Lab 9-2 In Synch
Ascanio, Ibarra, Jiménez Castro, Jiménez Cera
Solución Ticket Lab 9-2 In Synch – TT-A
En el TT-A primeramente plantean la situación de que SAPNA solicita ayuda

para solucionar algunas rutas faltantes requeridas para las pruebas de
implementación de BGP-VRF hay que verificar que la implementación sea
la correcta. Procedemos a validar la conectividad LAN con las
especificaciones de VTPv3 y MST.
Utilizamos el comando show spanning-tree mst configuration y así podemos

observar que DLS2 y ALS1 cuentan con la información correcta con las
especificaciones de MST. Sin embargo, a DLS1 le falta la configuración de la
instance 2 y la VLAN 110. Para poder agregar la VLAN al DLS1 se debe
configurar el DLS1 en modo transparent vlan para poder asignar la VLAN 110.
Y luego volvemos a dejarlo como el Primary Server para el VTP. Aplicando
los siguientes comandos:
(config)# configure terminal

(config)# vtp mode transparent vlan
(config)# vlan 110
(config-vlan)# name GUEST
(config-vlan)# exit
(config)# vtp mode server vlan
Luego debemos configurar la instance 2 de MST, sin embargo, al agregarla,

cuando aplicamos el comando show vtp status muestra que DLS1 no es el
servidor primario para la función MST VTP, y debemos realizar el cambio, con
los siguientes comandos:
(config)# vtp mode transparent mst

(config)# spanning-tree mst configuration
(config-mst)# instance 2 vlan 100,200,300
(config-mst)# exit
(config)# vtp mode server mst
Y ya nos deberá aparecer en la salida cuando aplicamos el comando show

spanning-tree mst configuration en el Feature MST el modo de operación de
VTP como Primary Server.
Según las especificaciones las rutas requieren sincronización, así que la ruta
192.168.2.2/32 debe registrar como una ruta IGP en el dominio de
enrutamiento EIGRP. En R1 las rutas BGP se redistribuyen en EIGRP en IPv4 e
IPv6). Pero en R2 No se observan comandos de redistribución. Se procede a
agregar los comandos en R3 que tiene R1 para las direcciones EIGRP de IPv4
e IPv6. Adicional se debe redistribuir la métrica BGP 65501 1544 2000 255 1
1500. Y pudimos evidencias que R1 ha aprendido la ruta 192.168.2.2/32
como una ruta EIGRP externa, y R2 aprendió la ruta a través de BGP.
Solución Ticket Lab 9-2 In Synch – TT-B
Según lo solicitado en el TT-B se debe proceder a verificar el estado del BGP

con el comando show bgp summary en R1 podemos observar que el estado
BGP está activo para la sesión IBGP. Entonces primero crearemos la ACL en
DLS1 hacía la red interna por la interfaz Fa0/5. Con los siguientes comandos:
access-list 100 permit tcp host 192.168.1.1 host 192.168.3.1 eq bgp

access-list 100 permit udp any any
access-list 100 permit eigrp any any
access-list 100 permit icmp any any
Se procede a generar ACL en DLS2 se aplica hacía la red interna por la

interfaz Fa0/5.

Puesto que la sesión TCP para iBGP es la conexión entre cliente-servidor

con el puerto de destino 179. En caso de que R1 inicie la sesión BGP TCP en
donde DLS2 bloqueará el tráfico TCP de retorno para la sesión iBGP. Se
puede solucionar agregando una ACE a cada ACL que permita que el
puerto de origen sea 179.

access-list 100 permit tcp host 192.168.1.1 eq bgp host 192.168.3.1

El resultado es que la sesión de IBGP estará establecida. Y se verificó por

medio del comando show bgp neighbors 192.168.3.1 en el R1.
Para el seguimiento de la interfaz HSRP debemos apagar la interfaz Fa0/5

en DLS1 y nada cambia con respecto al estado active/standby lo mismo
sucede en DLS2. Cuando se verificó la configuración de HSRP en el SVI 99
se observa lo siguiente:
standby 99 ip 10.1.99.254
standby 99 priority 110
standby 99 preempt
standby 99 track 1 decrement 10
SVI 110 y SVI 120 en DLS1 están configurados de manera similar. Esto significa
que cuando la interfaz Fa0/5 disminuye, la prioridad de HSRP se reduce de
110 a 100, que es la prioridad de HSRP predeterminada para el mismo SVI en
DLS2. Con HSRP, si las prioridades son iguales, el enrutador activo actual no
cambia. El valor de decrement debe ser mayor que 10. Se procede a
aumentar el valor de decrement a 20 en SVI 99, 110 y 120 en DLS1, y en SVI
100 y 200 en DLS2 aumenta el valor de decrement a 20. Así:
standby 99 track Fa0/5 20

track 1 interface FastEthernet0/5 line-protocol
Una vez realizado esto, al apagar Fa0/5 en DLS1, DLS2 se convierte en el

enrutador activo de HSRP para las VLAN 99, 110 y 120. Y al apagar Fa0/5 en
DLS2 obliga a DLS1 a convertirse en el enrutador activo HSRP para las VLAN
100 y 200.
También se presenta fallas en la sumarización de las rutas de EIGRP. Se

procede a agregar los siguientes comandos:
router eigrp HQ
address-family ipv4 unicast autonomous-system 1
network 10.2.1.1 0.0.0.0
network 10.2.2.1 0.0.0.0
Las redes EIGRP loopback de IPv4 de DLS1 no se ven en DLS2. En las tablas
de enrutamiento de R3 tampoco está presente la sumarización de las rutas
de DLS2 por lo que se procede a realizar la configuración.
ip summary-address eigrp 1 10.2.0.0 255.255.252.0

ipv6 summary-address eigrp 1 2001:DB8:CAFE:2000::/52
Solución Ticket Lab 9-2 In Synch – TT-C
El problema se da en los objetos del SLA TCP Connect de HSRP.
Solo tenemos filtros de paquetes en DLS1 y DLS2 (de TT-A); restringen TCP a
BGP, por lo que actualizamos las ACL, agregando las líneas:
access-list 100 permit tcp any any eq 23

access-list 100 permit tcp any eq 23 any
Después de estas actualizaciones de ACL, Telnet desde la LAN funciona a

R3 pero no a R1.
Con Telnet a R3 solicitando un nombre de usuario y una contraseña, la única

posibilidad es que AAA esté en vigencia. AAA de hecho estaba estipulado
en la línea base original. En R1 encontramos:
aaa new-model
aaa authentication login default local
aaa authentication login CONSOLE none
aaa authorization exec default local
Ahora Telnet trabaja para R1. Tenga en cuenta que la característica TCP
Connect del SLA 2 no impide el acceso de Telnet a R1 o R3, incluso si las
direcciones IPv6 en el SLA definido por IPv6 se utilizan como direcciones IPv6
de destino.
TT-A Configurations SH RUN
Switch ALS1
!Lab 9-2 Switch ALS1 TT-A Config
!
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ALS1
!
logging buffered 16384
enable secret cisco
!
username cisco secret cisco
aaa new-model
!
!
!
!
clock timezone PST -8
clock summer-time PDT recurring
do clock set 09:05:00 Oct 29 2014
system mtu routing 1500
ip routing
!
!
no ip domain-lookup
ip domain-name tshoot.net
ipv6 unicast-routing
!
errdisable recovery cause psecure-violation
errdisable recovery interval 120
!
vtp mode transparent
!
vlan 99
name MANAGEMENT
!
vlan 100
name SERVERS
!
vlan 110
name GUEST
!
vlan 120
name OFFICE
!
vlan 200
name VOICE
!
vlan 300
name E-PEER
!
vlan 666
name NATIVE
vlan 999
name PARKING_LOT
!
spanning-tree mode mst
spanning-tree portfast default
!
vtp domain TSHOOT
vtp version 3
vtp mode transparent mst
vtp mode server vlan
spanning-tree mst configuration
name TSHOOT
revision 25
instance 1 vlan 99,110,120
exit
vtp mode server mst
vtp password cisco hidden
!
ip telnet source-interface Vlan99
ip ssh source-interface Vlan99
ip ssh dh min size 2048
!
!
interface Port-channel1
description Channel to DLS1
switchport trunk native vlan 666
switchport trunk allowed vlan 99,100,110,120,200,300
switchport mode trunk
switchport nonegotiate
no shutdown
!
no shutdown
!
interface FastEthernet0/1
channel-group 1 mode on
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
description PARKING_LOT
switchport access vlan 999
switchport mode access
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
description To PC-B
switchport voice vlan 200
switchport port-security maximum 3
switchport port-security
switchport port-security mac-address sticky
spanning-tree portfast
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
interface GigabitEthernet0/1
shutdown
!
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.1.99.251 255.255.255.0
ipv6 address FE80::A1 link-local
ipv6 address 2001:DB8:CAFE:99::A1/64
no ip proxy-arp
no shutdown
!
interface Vlan110
ip address 10.1.110.251 255.255.255.0
ipv6 nd prefix 2001:DB8:CAFE:110::/64 no-autoconfig
ipv6 nd managed-config-flag
no ip proxy-arp
no shutdown
!
interface Vlan120
ip address 10.1.120.251 255.255.255.0
no ip proxy-arp
no shutdown
!
interface Vlan200
ip address 10.1.200.251 255.255.255.0
no ip proxy-arp
no shutdown
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 10.1.99.254
logging source-interface Vlan99
logging host 10.1.100.1
ipv6 route ::/0 2001:DB8:CAFE:99::D1
!
snmp-server community cisco RO
snmp-server community san-fran RW
snmp-server trap-source Vlan99
snmp-server location TSHOOT Lab Facility
snmp-server contact support@tshoot.net
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps vlan-membership
snmp-server host 10.1.100.1 version 2c cisco
!
banner motd ^*** Lab 9-2 Switch ALS1 TT-A Config ***^
!
ipv6 access-list REMOTEv6
deny ipv6 any any
!
line con 0
exec-timeout 0 0
logging synchronous
login authentication CONSOLE
line vty 0 4
exec-timeout 0 0
ipv6 access-class REMOTEv6 in
logging synchronous
length 0
transport input telnet ssh
!
ntp source Vlan99
ntp server 192.168.2.1
!
crypto key gen rsa general-keys modulus 1024
!
!
archive
log config
logging enable
logging size 50
notify syslog contenttype plaintext
hidekeys
path tftp://10.1.100.1/$h-archive-config
write-memory
file prompt quiet
!
end
!
Switch DLS1
!Lab 9-2 Switch DLS1 TT-A Config
!
!
hostname DLS1
!
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
ip routing
no ip domain-lookup
!
ip dhcp excluded-address 10.1.110.1 10.1.110.5
!
ip dhcp pool VOICE
network 10.1.200.0 255.255.255.0
default-router 10.1.200.254
!
ip dhcp pool GUEST
network 10.1.110.0 255.255.255.0
!
ip dhcp pool OFFICE
network 10.1.120.0 255.255.255.0
!
!
ipv6 dhcp pool DHCPv6OFFICE
address prefix 2001:DB8:CAFE:120:ABCD::/80
domain-name tshoot.net
!
ipv6 dhcp pool DHCPv6VOICE
!
ipv6 dhcp pool DHCPv6GUEST
!
!
errdisable recovery cause bpduguard
!
!
vlan 99
name MANAGEMENT
!
vlan 100
name SERVERS
!
vlan 120
name OFFICE
!
vlan 200
name VOICE
!
vlan 300
name E-PEER
!
vlan 666
name NATIVE
!
vlan 999
name PARKING_LOT
!
!
!
vtp domain TSHOOT
vtp version 3
name TSHOOT
revision 25
exit
vtp mode server mst
do vtp primary vlan force
!
spanning-tree mst 1 priority 24576
!
!
description Channel to ALS1
switchport trunk encapsulation dot1q
no shutdown
!
shutdown
!
no shutdown
!
no shutdown
!
shutdown
!
shutdown
!
description FE to R1
no switchport
ip address 10.1.2.1 255.255.255.252
ipv6 address FE80::D1 link-local
ipv6 address 2001:DB8:CAFE:20::D1/64
speed 100
duplex full
spanning-tree bpduguard enable
no shutdown
!
description FE to SRV1
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.1.99.252 255.255.255.0
no ip proxy-arp
standby 99 ip 10.1.99.254
standby 99 preempt
no shutdown
!
interface Vlan100
ip address 10.1.100.252 255.255.255.0
no ip proxy-arp
standby 100 ip 10.1.100.254
standby 100 preempt
no shutdown
!
interface Vlan110
ip address 10.1.110.252 255.255.255.0
no ip proxy-arp
standby 110 ip 10.1.110.254
standby 110 preempt
ipv6 dhcp server DHCPv6GUEST
no shutdown
!
interface Vlan120
ip address 10.1.120.252 255.255.255.0
no ip proxy-arp
standby 120 ip 10.1.120.254
standby 120 preempt
ipv6 dhcp server DHCPv6OFFICE
no shutdown
!
interface Vlan200
ip address 10.1.200.252 255.255.255.0
no ip proxy-arp
standby 200 ip 10.1.200.254
standby 200 preempt
ipv6 dhcp server DHCPv6VOICE
no shutdown
!
interface Vlan300
ip address 10.1.30.252 255.255.255.0
no ip proxy-arp
no shutdown
!
router eigrp HQ
!
!
af-interface default
passive-interface
exit-af-interface
!
af-interface f0/5
no passive-interface
exit-af-interface
!
af-interface vlan300
exit-af-interface
!
topology base
exit-af-topology
network 10.1.0.0 0.0.255.255
exit-address-family
!
!
passive-interface
exit-af-interface
!
af-interface f0/5
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
no ip http server
!
!
!
snmp-server enable traps eigrp
snmp-server enable traps config
snmp-server enable traps hsrp
snmp-server enable traps errdisable
!
!
banner motd ^*** Lab 9-2 Switch DLS1 TT-A Config ***^
!
line con 0
exec-timeout 0 0
logging synchronous
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp source Vlan99
!
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Switch DLS2
!Lab 9-2 Switch DLS2 TT-A Config
!
service timestamps log datetime
!
hostname DLS2
!
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
ip routing
no ip domain-lookup
!
!
!
ip dhcp pool VOICE
network 10.1.200.0 255.255.255.0
!
ip dhcp pool GUEST
network 10.1.110.0 255.255.255.0
!
ip dhcp pool OFFICE
network 10.1.120.0 255.255.255.0
!
!
!
!
!
!
!
!
!
vlan 99
name MANAGEMENT
!
vlan 100
name SERVERS
!
vlan 110
name GUEST
!
vlan 120
name OFFICE
!
vlan 200
name VOICE
!
vlan 300
name E-PEER
!
vlan 666
name NATIVE
!
vlan 999
name PARKING_LOT
!
!
!
vtp domain TSHOOT
vtp version 3
vtp mode server mst
do vtp primary mst force
!
!
name TSHOOT
revision 25
exit
!
!
!
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no switchport
ip address 10.1.2.13 255.255.255.252
speed 100
duplex full
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
description FE to PC-C
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.1.99.253 255.255.255.0
no ip proxy-arp
standby 99 ip 10.1.99.254
standby 99 preempt
no shutdown
!
interface Vlan100
ip address 10.1.100.253 255.255.255.0
no ip proxy-arp
standby 100 ip 10.1.100.254
standby 100 preempt
no shutdown
!
interface Vlan110
ip address 10.1.110.253 255.255.255.0
no ip proxy-arp
standby 110 ip 10.1.110.254
standby 110 preempt
no shutdown
!
interface Vlan120
ip address 10.1.120.253 255.255.255.0
no ip proxy-arp
standby 120 ip 10.1.120.254
standby 120 preempt
no shutdown
!
interface Vlan200
ip address 10.1.200.253 255.255.255.0
no ip proxy-arp
standby 200 ip 10.1.200.254
standby 200 preempt
no shutdown
!
interface Vlan300
ip address 10.1.30.253 255.255.255.0
no ip proxy-arp
no shutdown
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
af-interface f0/5
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 10.1.0.0 0.0.255.255
exit-address-family
!
!
passive-interface
exit-af-interface
!
af-interface f0/5
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
no ip http server
!
!
!
!
!
banner motd ^*** Lab 9-2 Switch DLS2 TT-A Config ***^
!
line con 0
exec-timeout 0 0
logging synchronous
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp source Vlan99
!
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Router R1
!Lab 9-2 Router R1 TT-A Config
!
!
hostname R1
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
!
!
no ip domain lookup
ip domain name tshoot.net
ip cef
ipv6 cef
!
!
!
ip telnet source-interface Loopback0
ip ssh source-interface Loopback0
!
!
interface Loopback0
ip address 192.168.1.1 255.255.255.255
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:CAFE:201::1/128
!
!
no ip address
shutdown
duplex auto
speed auto
shutdown
!
description FE to DLS1
ip address 10.1.2.2 255.255.255.252
ip flow ingress
duplex full
speed 100
no shutdown
!
interface Serial0/0/0
description WAN link to R2: 2 Mbps leased line
ip address 209.165.200.225 255.255.255.252
ip flow ingress
encapsulation ppp
clock rate 2000000
no shutdown
!
description WAN link to R3 (not used)
no ip address
shutdown
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
af-interface GigabitEthernet0/1
exit-af-interface
!
topology base
redistribute bgp 65501 metric 1544 2000 255 1 1500
exit-af-topology
network 192.168.1.1 0.0.0.0
network 10.1.2.0 0.0.0.3
exit-address-family
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
router bgp 65501
bgp router-id 1.0.0.1
bgp log-neighbor-changes
neighbor 192.168.3.1 remote-as 65501
neighbor 192.168.3.1 password cisocs
neighbor 192.168.3.1 update-source Loopback0
neighbor 209.165.200.226 password cisco
!
address-family ipv4
synchronization
network 10.1.0.0 mask 255.255.0.0
neighbor 192.168.3.1 activate
neighbor 192.168.3.1 next-hop-self
exit-address-family
!
address-family ipv6
synchronization
network 2001:DB8:CAFE:10::/126
neighbor 192.168.3.1 route-map IPv4TransportIPv6RouteFromR3 in
exit-address-family
!
!
route-map IPv4TransportIPv6RouteFromR2 permit 10
set ipv6 next-hop 2001:DB8:CAFE:10::2
!
!
!
!
!
ip http server
ip http secure-server
ip flow-top-talkers
top 3
sort-by bytes
cache-timeout 600000
!
ip route 10.1.0.0 255.255.0.0 Null0
!
logging source-interface Loopback0
!
!
snmp-server trap-source Loopback0
snmp-server enable traps flash insertion
snmp-server enable traps flash removal
snmp-server enable traps cpu threshold
!
!
alias exec srb show run | begin router bgp
alias exec sre show run | begin router eigrp
banner motd ^*** Lab 9-2 Router R1 TT-A Config ***^
!
line con 0
exec-timeout 0 0
logging synchronous
!
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp source Loopback0
ntp update-calendar
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Router R2
!
!
hostname R2
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
!
!
no ip domain lookup
ip cef
ipv6 cef
!
!
!
!
ip tftp source-interface lo0
!
!
vrf definition VPN_A
rd 100:1
route-target export 100:1
route-target import 100:1
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
vrf definition VPN_B
rd 200:1
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
!
interface Loopback0
vrf forwarding VPN_A
ip address 192.168.2.1 255.255.255.255
!
interface Loopback1
vrf forwarding VPN_B
ip address 192.168.2.2 255.255.255.255
!
no ip address
shutdown
duplex auto
speed auto
shutdown
!
description optional connection for PC-C w/ static address
no ip address
shutdown
duplex auto
speed auto
shutdown
!
ip address 209.165.200.226 255.255.255.252
ip flow ingress
encapsulation ppp
no shutdown
!
ip address 209.165.200.222 255.255.255.252
ip flow ingress
encapsulation ppp
clock rate 2000000
no shutdown
!
!
router bgp 65502
no bgp default ipv4-unicast
!
address-family ipv4 vrf VPN_A
network 192.168.2.1 mask 255.255.255.255
exit-address-family
!
network 2001:DB8:CAFE:202::2/128
neighbor 209.165.200.225 route-map IPv4TransportIPv6RouteA in
exit-address-family
!
address-family ipv4 vrf VPN_B
network 192.168.2.2 mask 255.255.255.255
neighbor 209.165.200.221 local-as 65503 no-prepend replace-as
neighbor 209.165.200.221 allowas-in
exit-address-family
!
neighbor 209.165.200.221 route-map IPv4TransportIPv6RouteB in
exit-address-family
!
!
route-map IPv4TransportIPv6RouteA permit 10
!
route-map IPv4TransportIPv6RouteB permit 10
!
!
!
ip http server
ip flow-top-talkers
top 3
sort-by bytes
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
!
line vty 0 4
exec-timeout 0 0
logging synchronous
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Router R3
!
!
hostname R3
!
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
!
!
no ip domain lookup
ip cef
ipv6 cef
!
!
!
!
!
interface Loopback0
ip address 192.168.3.1 255.255.255.255
!
no ip address
shutdown
duplex auto
speed auto
shutdown
!
ip address 10.1.2.14 255.255.255.252
ip flow ingress
duplex full
speed 100
no shutdown
!
description WAN link to R1 - (Not used)
no ip address
encapsulation ppp
clock rate 2000000
shutdown
!
ip address 209.165.200.221 255.255.255.252
ip flow ingress
encapsulation ppp
no shutdown
!
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 10.1.2.12 0.0.0.3
network 192.168.3.1 0.0.0.0
exit-address-family
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
!
!
router bgp 65501
!
address-family ipv4
synchronization
network 10.1.0.0 mask 255.255.0.0
exit-address-family
!
address-family ipv6
synchronization
exit-address-family
!
!
!
!
!
!
ip http server
ip flow-top-talkers
top 3
sort-by bytes
!
ip route 10.1.0.0 255.255.0.0 Null0
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
!
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp update-calendar
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
TT-B Configurations SH RUN
Switch ALS1
!Lab 9-2 Switch ALS1 TT-B Config
!
!
hostname ALS1
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
ip routing
!
!
no ip domain-lookup
!
!
!
vlan 99
name MANAGEMENT
!
vlan 100
name SERVERS
!
vlan 110
name GUEST
!
vlan 120
name OFFICE
!
vlan 200
name VOICE
!
vlan 300
name E-PEER
!
vlan 666
name NATIVE
vlan 999
name PARKING_LOT
!
!
vtp domain TSHOOT
vtp version 3
name TSHOOT
revision 25
exit
vtp mode server mst
!
!
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
description To PC-B
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.1.99.251 255.255.255.0
no ip proxy-arp
no shutdown
!
interface Vlan110
ip address 10.1.110.251 255.255.255.0
no ip proxy-arp
no shutdown
!
interface Vlan120
ip address 10.1.120.251 255.255.255.0
no ip proxy-arp
no shutdown
!
interface Vlan200
ip address 10.1.200.251 255.255.255.0
no ip proxy-arp
no shutdown
!
no ip http server
ip route 0.0.0.0 0.0.0.0 10.1.99.254
!
!
banner motd ^*** Lab 9-2 Switch ALS1 TT-B Config ***^
!
deny ipv6 any any
!
line con 0
exec-timeout 0 0
logging synchronous
line vty 0 4
exec-timeout 0 0
logging synchronous
length 0
!
ntp source Vlan99
!
!
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Switch DLS1
!Lab 9-2 Switch DLS1 TT-B Config
!
!
hostname DLS1
!
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
ip routing
no ip domain-lookup
!
!
ip dhcp pool VOICE
network 10.1.200.0 255.255.255.0
!
ip dhcp pool GUEST
network 10.1.110.0 255.255.255.0
!
ip dhcp pool OFFICE
network 10.1.120.0 255.255.255.0
!
!
!
!
!
!
!
!
vlan 99
name MANAGEMENT
!
vlan 100
name SERVERS
!
vlan 110
name GUEST
!
vlan 120
name OFFICE
!
vlan 200
name VOICE
!
vlan 300
name E-PEER
!
vlan 666
name NATIVE
!
vlan 999
name PARKING_LOT
!
!
!
vtp domain TSHOOT
vtp version 3
name TSHOOT
revision 25
exit
vtp mode server mst
!
!
!
!!
interface Loopback0
ip address 10.2.1.1 255.255.255.0
!
interface Loopback1
ip address 10.2.2.1 255.255.255.0
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no switchport
ip address 10.1.2.1 255.255.255.252
ip access-group 100 in
speed 100
duplex full
no shutdown
!
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.1.99.252 255.255.255.0
no ip proxy-arp
standby 99 ip 10.1.99.254
standby 99 track f0/5 10
standby 99 preempt
no shutdown
!
interface Vlan100
ip address 10.1.100.252 255.255.255.0
no ip proxy-arp
standby 100 ip 10.1.100.254
standby 100 preempt
no shutdown
!
interface Vlan110
ip address 10.1.110.252 255.255.255.0
no ip proxy-arp
standby 110 ip 10.1.110.254
standby 110 preempt
no shutdown
!
interface Vlan120
ip address 10.1.120.252 255.255.255.0
no ip proxy-arp
standby 120 ip 10.1.120.254
standby 120 preempt
no shutdown
!
interface Vlan200
ip address 10.1.200.252 255.255.255.0
no ip proxy-arp
standby 200 ip 10.1.200.254
standby 200 preempt
no shutdown
!
interface Vlan300
ip address 10.1.30.252 255.255.255.0
no ip proxy-arp
no shutdown
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
af-interface f0/5
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 10.1.0.0 0.0.255.255
exit-address-family
!
!
passive-interface
exit-af-interface
!
af-interface f0/5
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
no ip http server
!
!
!
!
!
!
banner motd ^*** Lab 9-2 Switch DLS1 TT-B Config ***^
!
line con 0
exec-timeout 0 0
logging synchronous
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp source Vlan99
!
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Switch DLS2
!Lab 9-2 Switch DLS2 TT-B Config
!
!
hostname DLS2
!
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
ip routing
no ip domain-lookup
!
!
!
ip dhcp pool VOICE
network 10.1.200.0 255.255.255.0
!
ip dhcp pool GUEST
network 10.1.110.0 255.255.255.0
!
ip dhcp pool OFFICE
network 10.1.120.0 255.255.255.0
!
!
!
!
!
!
!
!
!
vlan 99
name MANAGEMENT
!
vlan 100
name SERVERS
!
vlan 110
name GUEST
!
vlan 120
name OFFICE
!
vlan 200
name VOICE
!
vlan 300
name E-PEER
!
vlan 666
name NATIVE
!
vlan 999
name PARKING_LOT
!
!
!
vtp domain TSHOOT
vtp version 3
vtp mode server mst
!
!
name TSHOOT
revision 25
exit
!
!
!
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no switchport
ip address 10.1.2.13 255.255.255.252
ip summary-address eigrp 1 10.2.0.0 255.255.252.0
ipv6 summary-address eigrp 1 2001:DB8:CAFE:2000::/52
speed 100
duplex full
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.1.99.253 255.255.255.0
no ip proxy-arp
standby 99 ip 10.1.99.254
standby 99 preempt
no shutdown
!
interface Vlan100
ip address 10.1.100.253 255.255.255.0
no ip proxy-arp
standby 100 ip 10.1.100.254
standby 100 preempt
no shutdown
!
interface Vlan110
ip address 10.1.110.253 255.255.255.0
no ip proxy-arp
standby 110 ip 10.1.110.254
standby 110 preempt
no shutdown
!
interface Vlan120
ip address 10.1.120.253 255.255.255.0
no ip proxy-arp
standby 120 ip 10.1.120.254
standby 120 preempt
no shutdown
!
interface Vlan200
ip address 10.1.200.253 255.255.255.0
no ip proxy-arp
standby 200 ip 10.1.200.254
standby 200 preempt
no shutdown
!
interface Vlan300
ip address 10.1.30.253 255.255.255.0
no ip proxy-arp
no shutdown
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
af-interface f0/5
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 10.1.0.0 0.0.255.255
exit-address-family
!
!
passive-interface
exit-af-interface
!
af-interface f0/5
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
no ip http server
!
!
!
!
!
!
banner motd ^*** Lab 9-2 Switch DLS2 TT-B Config ***^
!
line con 0
exec-timeout 0 0
logging synchronous
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp source Vlan99
!
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Router R1
!Lab 9-2 Router R1 TT-B Config
!
!
hostname R1
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
!
!
no ip domain lookup
ip cef
ipv6 cef
!
!
!
!
!
interface Loopback0
ip address 192.168.1.1 255.255.255.255
!
!
no ip address
shutdown
duplex auto
speed auto
shutdown
!
ip address 10.1.2.2 255.255.255.252
ip flow ingress
duplex full
speed 100
no shutdown
!
ip address 209.165.200.225 255.255.255.252
ip flow ingress
encapsulation ppp
clock rate 2000000
no shutdown
!
no ip address
shutdown
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 192.168.1.1 0.0.0.0
network 10.1.2.0 0.0.0.3
exit-address-family
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
router bgp 65501
!
address-family ipv4
synchronization
network 10.1.0.0 mask 255.255.0.0
exit-address-family
!
address-family ipv6
synchronization
exit-address-family
!
!
!
!
!
!
!
ip http server
ip flow-top-talkers
top 3
sort-by bytes
!
ip route 10.1.0.0 255.255.0.0 Null0
!
!
!
!
!
banner motd ^*** Lab 9-2 Router R1 TT-B Config ***^
!
line con 0
exec-timeout 0 0
logging synchronous
!
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp update-calendar
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Router R2
!
!
hostname R2
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
!
!
no ip domain lookup
ip cef
ipv6 cef
!
!
!
!
!
!
rd 100:1
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
rd 200:1
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
!
interface Loopback0
ip address 192.168.2.1 255.255.255.255
!
interface Loopback1
ip address 192.168.2.2 255.255.255.255
!
no ip address
shutdown
duplex auto
speed auto
shutdown
!
no ip address
shutdown
duplex auto
speed auto
shutdown
!
ip address 209.165.200.226 255.255.255.252
ip flow ingress
encapsulation ppp
no shutdown
!
ip address 209.165.200.222 255.255.255.252
ip flow ingress
encapsulation ppp
clock rate 2000000
no shutdown
!
!
router bgp 65502
!
network 192.168.2.1 mask 255.255.255.255
exit-address-family
!
exit-address-family
!
network 192.168.2.2 mask 255.255.255.255
exit-address-family
!
exit-address-family
!
!
!
!
!
!
ip http server
ip flow-top-talkers
top 3
sort-by bytes
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
!
line vty 0 4
exec-timeout 0 0
logging synchronous
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Router R3
!
!
hostname R3
!
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
!
!
no ip domain lookup
ip cef
ipv6 cef
!
!
!
!
!
interface Loopback0
ip address 192.168.3.1 255.255.255.255
!
no ip address
shutdown
duplex auto
speed auto
shutdown
!
ip address 10.1.2.14 255.255.255.252
ip flow ingress
duplex full
speed 100
no shutdown
!
no ip address
encapsulation ppp
clock rate 2000000
shutdown
!
ip address 209.165.200.221 255.255.255.252
ip flow ingress
encapsulation ppp
no shutdown
!
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 10.1.2.12 0.0.0.3
network 192.168.3.1 0.0.0.0
exit-address-family
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
!
!
router bgp 65501
!
address-family ipv4
synchronization
network 10.1.0.0 mask 255.255.0.0
exit-address-family
!
address-family ipv6
synchronization
exit-address-family
!
!
!
!
!
!
ip http server
ip flow-top-talkers
top 3
sort-by bytes
!
ip route 10.1.0.0 255.255.0.0 Null0
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
!
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp update-calendar
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
TT-C Configurations SH RUN
Switch ALS1
!Lab 9-2 Switch ALS1 TT-C Config
!
!
hostname ALS1
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
ip routing
!
!
no ip domain-lookup
!
!
!
vlan 99
name MANAGEMENT
!
vlan 100
name SERVERS
!
vlan 110
name GUEST
!
vlan 120
name OFFICE
!
vlan 200
name VOICE
!
vlan 300
name E-PEER
!
vlan 666
name NATIVE
vlan 999
name PARKING_LOT
!
!
vtp domain TSHOOT
vtp version 3
name TSHOOT
revision 25
exit
vtp mode server mst
!
lldp run
!
!
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
description To PC-B
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.1.99.251 255.255.255.0
no ip proxy-arp
no shutdown
!
interface Vlan110
ip address 10.1.110.251 255.255.255.0
no ip proxy-arp
no shutdown
!
interface Vlan120
ip address 10.1.120.251 255.255.255.0
no ip proxy-arp
no shutdown
!
interface Vlan200
ip address 10.1.200.251 255.255.255.0
no ip proxy-arp
no shutdown
!
no ip http server
ip route 0.0.0.0 0.0.0.0 10.1.99.254
!
!
banner motd ^*** Lab 9-2 Switch ALS1 TT-C Config ***^
!
deny ipv6 any any
!
line con 0
exec-timeout 0 0
logging synchronous
line vty 0 4
exec-timeout 0 0
logging synchronous
length 0
!
ntp source Vlan99
!
!
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Switch DLS1
!Lab 9-2 Switch DLS1 TT-C Config
!
!
hostname DLS1
!
!
enable secret cisco
!
!aaa new-model
!
!
!aaa authentication login default local
!aaa authentication login CONSOLE none
!aaa authorization exec default local
!
!
do clock set 09:05:00 Oct 29 2014
ip routing
no ip domain-lookup
!
!
ip dhcp pool VOICE
network 10.1.200.0 255.255.255.0
!
ip dhcp pool GUEST
network 10.1.110.0 255.255.255.0
!
ip dhcp pool OFFICE
network 10.1.120.0 255.255.255.0
!
!
!
!
!
!
!
!
vlan 99
name MANAGEMENT
!
vlan 100
name SERVERS
!
vlan 110
name GUEST
!
vlan 120
name OFFICE
!
vlan 200
name VOICE
!
vlan 300
name E-PEER
!
vlan 666
name NATIVE
!
vlan 999
name PARKING_LOT
!
!
!
vtp domain TSHOOT
vtp version 3
name TSHOOT
revision 25
exit
vtp mode server mst
!
!
track 23 ip sla 2
!
lldp run
!
!
!!
interface Loopback0
ip address 10.2.1.1 255.255.255.0
!
interface Loopback1
ip address 10.2.2.1 255.255.255.0
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no switchport
ip address 10.1.2.1 255.255.255.252
speed 100
duplex full
no shutdown
!
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.1.99.252 255.255.255.0
no ip proxy-arp
standby 99 ip 10.1.99.254
standby 99 preempt
no shutdown
!
interface Vlan100
ip address 10.1.100.252 255.255.255.0
no ip proxy-arp
standby 100 ip 10.1.100.254
standby 100 preempt
no shutdown
!
interface Vlan110
ip address 10.1.110.252 255.255.255.0
no ip proxy-arp
standby 110 ip 10.1.110.254
standby 110 preempt
no shutdown
!
interface Vlan120
ip address 10.1.120.252 255.255.255.0
no ip proxy-arp
standby 120 ip 10.1.120.254
standby 120 preempt
no shutdown
!
interface Vlan200
ip address 10.1.200.252 255.255.255.0
no ip proxy-arp
standby 200 ip 10.1.200.254
standby 200 preempt
no shutdown
!
interface Vlan300
ip address 10.1.30.252 255.255.255.0
no ip proxy-arp
no shutdown
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
af-interface F0/5
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 10.1.0.0 0.0.255.255
network 10.2.1.1 0.0.0.0
network 10.2.2.1 0.0.0.0
exit-address-family
!
!
passive-interface
exit-af-interface
!
af-interface F0/5
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
no ip http server
!
ip sla 2
tcp-connect 2001:DB8:CAFE:10::1 23 control disable
threshold 100
timeout 200
frequency 6
ip sla schedule 2 life forever start-time now
!
!
!
!
!
banner motd ^*** Lab 9-2 Switch DLS1 TT-C Config ***^
!
line con 0
exec-timeout 0 0
logging synchronous
line vty 0 4
exec-timeout 0 0
logging synchronous
login
!
ntp source Vlan99
!
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Switch DLS2
!Lab 9-2 Switch DLS2 TT-C Config
!
!
hostname DLS2
!
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
ip routing
no ip domain-lookup
!
!
!
ip dhcp pool VOICE
network 10.1.200.0 255.255.255.0
!
ip dhcp pool GUEST
network 10.1.110.0 255.255.255.0
!
ip dhcp pool OFFICE
network 10.1.120.0 255.255.255.0
!
!
!
!
!
!
!
!
!
vlan 99
name MANAGEMENT
!
vlan 100
name SERVERS
!
vlan 110
name GUEST
!
vlan 120
name OFFICE
!
vlan 200
name VOICE
!
vlan 300
name E-PEER
!
vlan 666
name NATIVE
!
vlan 999
name PARKING_LOT
!
!
!
vtp domain TSHOOT
vtp version 3
vtp mode server mst
!
!
name TSHOOT
revision 25
exit
!
!
!
lldp run
!
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no shutdown
!
no switchport
ip address 10.1.2.13 255.255.255.252
speed 100
duplex full
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
no shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan99
ip address 10.1.99.253 255.255.255.0
no ip proxy-arp
standby 99 ip 10.1.99.254
standby 99 preempt
no shutdown
!
interface Vlan100
ip address 10.1.100.253 255.255.255.0
no ip proxy-arp
standby 100 ip 10.1.100.254
standby 100 preempt
no shutdown
!
interface Vlan110
ip address 10.1.110.253 255.255.255.0
no ip proxy-arp
standby 110 ip 10.1.110.254
standby 110 preempt
no shutdown
!
interface Vlan120
ip address 10.1.120.253 255.255.255.0
no ip proxy-arp
standby 120 ip 10.1.120.254
standby 120 preempt
no shutdown
!
interface Vlan200
ip address 10.1.200.253 255.255.255.0
no ip proxy-arp
standby 200 ip 10.1.200.254
standby 200 preempt
no shutdown
!
interface Vlan300
ip address 10.1.30.253 255.255.255.0
no ip proxy-arp
no shutdown
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
af-interface F0/5
summary-address 10.2.0.0 255.255.252.0
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 10.1.0.0 0.0.255.255
exit-address-family
!
!
passive-interface
exit-af-interface
!
af-interface F0/5
summary-address 2001:DB8:CAFE:2000::/53
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
no ip http server
!
ip sla 2
tcp-connect 2001:DB8:CAFE:14::3 23 control disable
threshold 100
timeout 200
frequency 6
ip sla schedule 2 life forever start-time now
!
!
!
!
!
banner motd ^*** Lab 9-2 Switch DLS2 TT-C Config ***^
!
line con 0
exec-timeout 0 0
logging synchronous
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp source Vlan99
!
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Router R1
!Lab 9-2 Router R1 TT-C Config
!
!
hostname R1
!
enable secret cisco
!
!aaa new-model
!
!
!aaa authentication login default local
!aaa authentication login CONSOLE none
!aaa authorization exec default local
!
!
do clock set 09:05:00 Oct 29 2014
!
!
no ip domain lookup
ip cef
ipv6 cef
!
!
!
lldp run
!
!
!
!
interface Loopback0
ip address 192.168.1.1 255.255.255.255
!
!
ip address dhcp
no shutdown
duplex auto
speed auto
shutdown
!
ip address 10.1.2.2 255.255.255.252
ip flow ingress
duplex full
speed 100
no shutdown
!
ip address 209.165.200.225 255.255.255.252
ip flow ingress
encapsulation ppp
clock rate 2000000
no shutdown
!
no ip address
shutdown
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 192.168.1.1 0.0.0.0
network 10.1.2.0 0.0.0.3
exit-address-family
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
router bgp 65501
!
address-family ipv4
synchronization
network 10.1.0.0 mask 255.255.0.0
exit-address-family
!
address-family ipv6
synchronization
exit-address-family
!
!
!
!
!
!
!
ip http server
ip flow-top-talkers
top 3
sort-by bytes
!
ip route 10.1.0.0 255.255.0.0 Null0
!
!
!
!
!
banner motd ^*** Lab 9-2 Router R1 TT-C Config ***^
!
line con 0
exec-timeout 0 0
logging synchronous
!
line vty 0 4
exec-timeout 0 0
logging synchronous
login
!
ntp update-calendar
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Router R2
!
!
hostname R2
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
!
!
no ip domain lookup
ip cef
ipv6 cef
!
!
!
!
lldp run
!
!
!
!
rd 100:1
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
rd 200:1
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
!
interface Loopback0
ip address 192.168.2.1 255.255.255.255
!
interface Loopback1
ip address 192.168.2.2 255.255.255.255
!
no shutdown
ip address dhcp
duplex auto
speed auto
shutdown
!
no ip address
shutdown
duplex auto
speed auto
shutdown
!
ip address 209.165.200.226 255.255.255.252
ip flow ingress
encapsulation ppp
no shutdown
!
ip address 209.165.200.222 255.255.255.252
ip flow ingress
encapsulation ppp
clock rate 2000000
no shutdown
!
!
router bgp 65502
!
network 192.168.2.1 mask 255.255.255.255
exit-address-family
!
exit-address-family
!
network 192.168.2.2 mask 255.255.255.255
exit-address-family
!
exit-address-family
!
!
!
!
!
!
ip http server
ip flow-top-talkers
top 3
sort-by bytes
!
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
!
line vty 0 4
exec-timeout 0 0
logging synchronous
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!
Router R3
!
!
hostname R3
!
!
enable secret cisco
!
aaa new-model
!
!
!
!
do clock set 09:05:00 Oct 29 2014
!
!
no ip domain lookup
ip cef
ipv6 cef
!
!
!
lldp run
!
!
!
!
interface Loopback0
ip address 192.168.3.1 255.255.255.255
!
no shutdown
ip address dhcp
duplex auto
speed auto
shutdown
!
ip address 10.1.2.14 255.255.255.252
ip flow ingress
duplex full
speed 100
no shutdown
!
no ip address
encapsulation ppp
clock rate 2000000
shutdown
!
ip address 209.165.200.221 255.255.255.252
ip flow ingress
encapsulation ppp
no shutdown
!
!
router eigrp HQ
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
network 10.1.2.12 0.0.0.3
network 192.168.3.1 0.0.0.0
exit-address-family
!
!
passive-interface
exit-af-interface
!
exit-af-interface
!
topology base
exit-af-topology
exit-address-family
!
!
!
router bgp 65501
!
address-family ipv4
synchronization
network 10.1.0.0 mask 255.255.0.0
exit-address-family
!
address-family ipv6
synchronization
exit-address-family
!
!
!
!
!
!
ip http server
ip flow-top-talkers
top 3
sort-by bytes
!
ip route 10.1.0.0 255.255.0.0 Null0
!
!
!
!
!
!
line con 0
exec-timeout 0 0
logging synchronous
!
line vty 0 4
exec-timeout 0 0
logging synchronous
!
ntp update-calendar
!
archive
log config
logging enable
logging size 50
hidekeys
write-memory
file prompt quiet
!
end
!

Lab 9 Tshoot

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Lab 9 Tshoot

Transféré par

Droits d'auteur :

Formats disponibles

Laboratorio 9-2 In Synch

Andrea Ascanio, Carlos Ibarra, Auristela Jiménez, Janer Jiménez.

Ing. Piedad Marchena

Solución Ticket Lab 9-2 In Synch – TT-A

En el TT-A primeramente plantean la situación de que SAPNA solicita ayuda

Utilizamos el comando show spanning-tree mst configuration y así podemos

(config)# configure terminal

Luego debemos configurar la instance 2 de MST, sin embargo, al agregarla,

(config)# vtp mode transparent mst

Y ya nos deberá aparecer en la salida cuando aplicamos el comando show

Solución Ticket Lab 9-2 In Synch – TT-B

Según lo solicitado en el TT-B se debe proceder a verificar el estado del BGP

access-list 100 permit tcp host 192.168.1.1 host 192.168.3.1 eq bgp

Se procede a generar ACL en DLS2 se aplica hacía la red interna por la

access-list 100 permit tcp host 192.168.3.1 host 192.168.1.1 eq bgp

Puesto que la sesión TCP para iBGP es la conexión entre cliente-servidor

access-list 100 permit tcp host 192.168.1.1 host 192.168.3.1 eq bgp

access-list 100 permit eigrp any any

El resultado es que la sesión de IBGP estará establecida. Y se verificó por

Para el seguimiento de la interfaz HSRP debemos apagar la interfaz Fa0/5

standby 99 track Fa0/5 20

Una vez realizado esto, al apagar Fa0/5 en DLS1, DLS2 se convierte en el

También se presenta fallas en la sumarización de las rutas de EIGRP. Se

ip summary-address eigrp 1 10.2.0.0 255.255.252.0

Solución Ticket Lab 9-2 In Synch – TT-C

El problema se da en los objetos del SLA TCP Connect de HSRP.

access-list 100 permit tcp any any eq 23

Después de estas actualizaciones de ACL, Telnet desde la LAN funciona a

Con Telnet a R3 solicitando un nombre de usuario y una contraseña, la única

TT-A Configurations SH RUN

TT-B Configurations SH RUN

TT-C Configurations SH RUN

Vous aimerez peut-être aussi