R&S_Volume_1_WB_v11.0_Lab2

18
IPexpert’s Lab Preparation Workbook for the Cisco® CCIE™ v4 Routing & Switching Lab Exam Volume 1

description

IPexpert’s Lab Preparation Workbook for the Cisco® CCIE™ v4 Routing & Switching Lab Exam Volume 1 At the beginning of each section, you will be referred to a diagram of the network topology. All sections utilize the same physical topology, which can be rented at www.ProctorLabs.com. Telephone: +1.810.326.1444 Email: [email protected] v1500 Volume 1 – Introduction IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam Copyright © 2010 by IPexpert, Inc. All Rights Reserved. 1

Transcript of R&S_Volume_1_WB_v11.0_Lab2

Page 1: R&S_Volume_1_WB_v11.0_Lab2

IPexpert’s Lab Preparation Workbookfor the Cisco® CCIE™ v4 Routing & Switching Lab Exam

Volume 1

Page 2: R&S_Volume_1_WB_v11.0_Lab2
Page 3: R&S_Volume_1_WB_v11.0_Lab2

IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam Volume 1 – Introduction

v1500 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. 1

IPexpert Lab Preparation Workbook for the Cisco® CCIETM Routing & Switching Laboratory Exam – Volume One

Before We Begin This product is part of the IPexpert "Blended Learning Solution™" that provides CCIE candidates with a comprehensive training program. For information about the full solution, contact an IPexpert Training Advisor today. Telephone: +1.810.326.1444 Email: [email protected] Congratulations! You now possess one of the ULTIMATE CCIE

TM Routing & Switching Lab

preparation resources available today! This resource was produced by senior engineers, technical instructors and authors, boasting decades of internetworking experience. Although there is no way to guarantee a 100% success rate on the CCIE

TM Routing & Switching Lab exam, we feel VERY confident

that your chances of passing the Lab will improve dramatically after completing this industry-recognized Workbook! At the beginning of each section, you will be referred to a diagram of the network topology. All sections utilize the same physical topology, which can be rented at www.ProctorLabs.com.

Technical Support from IPexpert and your CCIE community!

IPexpert is proud to lead the industry with multiple support options at your disposal free of charge. Our online communities have attracted a membership of nearly 20,000 of your peers from around the world! At EverythingIE.com you may social-network with your peers all focused on attaining the same goal as you – the CCIE Lab. At CCIEBlog.com you can keep up to date with everything IPExpert does, as well as start your own CCIE-focused blog or simply add your existing blog to our directory so your peers can find you. At OnlineStudyList.com, you may subscribe to multiple “SPAM-free”, CCIE-focused email lists.

Page 4: R&S_Volume_1_WB_v11.0_Lab2

Volume 1 – Introduction IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam

2 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. v1500

Feedback Do you have a suggestion or other feedback regarding this book or other IPexpert products? At IPexpert, we look to you – our valued clients – for the real world, frontline evaluation that we believe is necessary to improve continually. Please send an email with your thoughts to [email protected] or call 1.866.225.8064 (international callers dial +1.810.326.1444). In addition, when you pass the CCIE

TM Lab exam, we want to hear about it! Email your CCIE

TM number to

[email protected] and let us know how IPexpert helped you succeed. We would like to send you a gift of thanks and congratulations.

Additional CCIETM Preparation Material IPexpert, Inc. is committed to developing the most effective Cisco CCIE

TM R&S, Security, Service

Provider, and Voice Lab certification preparation tools available. Our team of certified networking professionals develops the most up-to-date and comprehensive materials for networking certification, including self-paced workbooks, online Cisco hardware rental, classroom training, online (distance learning) instructor-led training, audio products, and video training materials. Unlike other certification-training providers, we employ the most experienced and accomplished team of experts to create, maintain, and constantly update our products. At IPexpert, we are focused on making your CCIE

TM Lab

preparation more effective.

A message from the Author(s): The scenarios covered in this workbook were developed by Routing & Switching CCIEs to help you prepare for the Cisco CCIE Routing & Switching laboratory. It is strongly recommended that you use other reading materials in addition to this workbook. Training is not the CCIE Routing & Switching workbook objective. The intent of these labs is to test your knowledge and ability of implementing Cisco Enterprise Routing & Switching Solutions. Time management is very important, if you get stuck on a lab scenario be sure to write it down. Formulate a Checklist for skipped sections and then return to those sections once you have gone through the entire lab. Be sure to revisit the questions that you do not understand.

For more information on the CCIE Routing & Switching lab, please visit (http://www.cisco.com/go/ccie) and click on the link for Routing & Switching on the top-right of the page. Helpful Hints

Keep It Simple, try to avoid any extra work (example: adding descriptions)

Always reference everything from the Documentation Website: http://www.cisco.com/web/psa/products/index.html

Save your router configurations often (wr is the quickest command)

Page 5: R&S_Volume_1_WB_v11.0_Lab2

IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam Volume 1 – EULA

v1500 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. 3

IPEXPERT END-USER LICENSE AGREEMENT

END USER LICENSE FOR ONE (1) PERSON ONLY

IF YOU DO NOT AGREE WITH THESE TERMS AND CONDITIONS,

DO NOT OPEN OR USE THE TRAINING MATERIALS.

This is a legally binding agreement between you and IPEXPERT, the “Licensor,” from whom you have licensed the IPEXPERT training materials (the “Training Materials”). By using the Training Materials, you agree to be bound by the terms of this License, except to the extent these terms have been modified by a written agreement (the “Governing Agreement”) signed by you (or the party that has licensed the Training Materials for your use) and an executive officer of Licensor. If you do not agree to the License terms, the Licensor is unwilling to license the Training Materials to you. In this event, you may not use the Training Materials, and you should promptly contact the Licensor for return instructions. The Training Materials shall be used by only ONE (1) INDIVIDUAL who shall be the sole individual authorized to use the Training Materials throughout the term of this License.

Copyright and Proprietary Rights

The Training Materials are the property of IPEXPERT, Inc. ("IPEXPERT") and are protected by United States and International copyright laws. All copyright, trademark, and other proprietary rights in the Training Materials and in the Training Materials, text, graphics, design elements, audio, and all other materials originated by IPEXPERT at its site, in its workbooks, scenarios and courses (the "IPEXPERT Information") are reserved to IPEXPERT.

The Training Materials cannot be used by or transferred to any other person. You may not rent, lease, loan, barter, sell or time-share the Training Materials or accompanying documentation. You may not reverse engineer, decompile, or disassemble the Training Materials. You may not modify, or create derivative works based upon the Training Materials in whole or in part. You may not reproduce, store, upload, post, transmit, download or distribute in any form or by any means, electronic, mechanical, recording or otherwise any part of the Training Materials and IPEXPERT Information other than printing out or downloading portions of the text and images for your own personal, non-commercial use without the prior written permission of IPEXPERT.

You shall observe copyright and other restrictions imposed by IPEXPERT. You may not use the Training Materials or IPEXPERT Information in any manner that infringes the rights of any person or entity.

Exclusions of Warranties

THE TRAINING MATERIALS AND DOCUMENTATION ARE PROVIDED “AS IS.” LICENSOR HEREBY DISCLAIMS ALL OTHER WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW THE LIMITATION OF INCIDENTAL DAMAGES OR LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS, SO THE ABOVE LIMITATIONS OR EXCLUSIONS MAY NOT APPLY TO YOU. This agreement gives you specific legal rights, and you may have other rights that vary from state to state.

Choice of Law and Jurisdiction

This Agreement shall be governed by and construed in accordance with the laws of the State of Michigan, without reference to any conflict of law principles. You agree that any litigation or other proceeding between you and Licensor in connection with the Training Materials shall be brought in the Michigan state or courts located in Port Huron, Michigan, and you consent to the jurisdiction of such courts to decide the matter. The parties agree that the United Nations Convention on Contracts for the International Sale of Goods shall not apply to this License. If any provision of this Agreement is held invalid, the remainder of this License shall continue in full force and effect.

Limitation of Claims and Liability

ANY ACTION ON ANY CLAIM AGAINST IPEXPERT MUST BE BROUGHT BY THE USER WITHIN ONE (1) YEAR FOLLOWING

Page 6: R&S_Volume_1_WB_v11.0_Lab2

Volume 1 – EULA IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam

4 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. v1500

THE DATE THE CLAIM FIRST ACCRUED, OR SHALL BE DEEMED WAIVED. IN NO EVENT WILL THE LICENSOR‟S LIABILITY UNDER, ARISING OUT OF, OR RELATING TO THIS AGREEMENT EXCEED THE AMOUNT PAID TO LICENSOR FOR THE TRAINING MATERIALS. LICENSOR SHALL NOT BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT, OR CONSEQUENTIAL DAMAGES, HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, REGARDLESS OF WHETHER LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. WITHOUT LIMITING THE FOREGOING, LICENSOR WILL NOT BE LIABLE FOR LOST PROFITS, LOSS OF DATA, OR COSTS OF COVER.

Entire Agreement

This is the entire agreement between the parties and may not be modified except in writing signed by both parties.

U.S. Government - Restricted Rights

The Training Materials and accompanying documentation are “commercial computer Training Materials” and “commercial computer Training Materials documentation,” respectively, pursuant to DFAR Section 227.7202 and FAR Section 12.212, as applicable. Any use, modification, reproduction release, performance, display, or disclosure of the Training Materials and accompanying documentation by the U.S. Government shall be governed solely by the terms of this Agreement and shall be prohibited except to the extent expressly permitted by the terms of this Agreement.

IF YOU DO NOT AGREE WITH THE ABOVE TERMS AND CONDITIONS, DO NOT OPEN OR USE THE TRAINING MATERIALS AND CONTACT LICENSOR FOR INSTRUCTIONS ON RETURN OF THE TRAINING MATERIALS.

Page 7: R&S_Volume_1_WB_v11.0_Lab2

IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam Volume 1 – Diagrams

v1500 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. 5

Layer 2 Connectivity Diagram

Page 8: R&S_Volume_1_WB_v11.0_Lab2

Volume 1 – Diagrams IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam

6 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. v1500

Base Connectivity Diagram

Page 9: R&S_Volume_1_WB_v11.0_Lab2

IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam Volume 1 – Table of Contents

v1500 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. 7

IPexpert Lab Preparation Workbook for the Cisco® CCIETM Routing & Switching Laboratory Exam – Volume 1

NOTE

You are encouraged to take advantage of the knowledge and support from your peers around the globe. Join ccieblog.com to journal your progress. And join OnlineStudyList.com to get more community support and also official support from IPexpert.

Contents IPEXPERT END-USER LICENSE AGREEMENT ........................................................................................ 3

END USER LICENSE FOR ONE (1) PERSON ONLY ............................................................................. 3 Layer 2 Connectivity Diagram ....................................................................................................................... 5

Base Connectivity Diagram ........................................................................................................................... 6

Lab 1 - General Setup ................................................................................................................................. 11

Lab 1 Topology ....................................................................................................................................... 12 Lab 1 Pre-Lab Setup ............................................................................................................................... 13 Lab 1 Configuration Tasks ...................................................................................................................... 14

Lab 2 – Switching: Per VLAN Spanning Tree + .......................................................................................... 17

Lab 2 Topology ....................................................................................................................................... 18 Lab 2 Pre-Lab Setup ............................................................................................................................... 19 Lab 2 Configuration Tasks ...................................................................................................................... 20

Lab 3 – Switching: Multiple Spanning Tree................................................................................................. 23

Lab 3 Topology ....................................................................................................................................... 24 Lab 3 Pre-Lab Setup ............................................................................................................................... 25 Lab 3 Configuration Tasks ...................................................................................................................... 26

Lab 4 – Switching: Rapid Per VLAN Spanning Tree+ ................................................................................ 29

Lab 4 Topology ....................................................................................................................................... 30 Lab 4 Pre-Lab Setup ............................................................................................................................... 31 Lab 4 Configuration Tasks ...................................................................................................................... 32

Lab 5 - Layer 2 Tunneling ........................................................................................................................... 35

Lab 5 Topology ....................................................................................................................................... 36 Lab 5 Configuration Tasks ...................................................................................................................... 38

Lab 6 - Frame Relay ................................................................................................................................... 41

Lab 6 Topology ....................................................................................................................................... 42 Lab 6 Pre-Lab Setup ............................................................................................................................... 43 Lab 6 Configuration Tasks ...................................................................................................................... 44

Lab 7 - Bridging and Frame Relay .............................................................................................................. 47

Lab 7 Topology ....................................................................................................................................... 48 Lab 7 Pre-Lab Setup ............................................................................................................................... 49 Lab 7 Configuration Tasks ...................................................................................................................... 50

Page 10: R&S_Volume_1_WB_v11.0_Lab2

Volume 1 – Table of Contents IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam

8 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. v1500

Lab 8 – RIPv2 ............................................................................................................................................. 51

Lab 8 Layer 2 Topology .......................................................................................................................... 52 Lab 8 Pre-Lab Setup ............................................................................................................................... 54 Lab 8 Configuration Tasks ...................................................................................................................... 55

Lab 9 – EIGRP ............................................................................................................................................ 59

Lab 9 Layer 2 Topology .......................................................................................................................... 60 Lab 9 Layer 3 Topology .......................................................................................................................... 61 Lab 9 Pre-Lab Setup ............................................................................................................................... 62 Lab 9 Configuration Tasks ...................................................................................................................... 63

Lab 10 – OSPF ........................................................................................................................................... 67

Lab 10 Layer 2 Topology ........................................................................................................................ 68 Lab 10 Layer 3 Topology ........................................................................................................................ 69 Lab 10 Configuration Tasks .................................................................................................................... 71

Lab 11 – OSPF ........................................................................................................................................... 73

Lab 11 Topology ..................................................................................................................................... 74 Lab 11 Addressing Table ........................................................................................................................ 75 Lab 11 Pre-Lab Setup ............................................................................................................................. 75 Lab 11 Configuration Tasks .................................................................................................................... 76

Lab 12 - GRE and Routing Protocols .......................................................................................................... 79

Lab 12 Topology ..................................................................................................................................... 80 Lab 12 Pre-Lab Setup ............................................................................................................................. 81 Lab 12 Configuration Tasks .................................................................................................................... 82

Lab 13 - Border Gateway Protocol .............................................................................................................. 85

Lab 13 Layer 2 Topology ........................................................................................................................ 86 Lab 13 Layer 3 Topology ........................................................................................................................ 87 Lab 13 Pre-Lab Setup ............................................................................................................................. 88 Lab 13 Configuration Tasks .................................................................................................................... 89

Lab 14 - Multiprotocol BGP ......................................................................................................................... 93

Lab 14 Topology ..................................................................................................................................... 94 Lab 14 Addressing Table ........................................................................................................................ 95 Lab 14 Pre-Lab Setup ............................................................................................................................. 96 Lab 14 Configuration Tasks .................................................................................................................... 97

Lab 15 - Routing Protocol Redistribution .................................................................................................. 101

Lab 15 Layer 2 Topology ...................................................................................................................... 102 Lab 15 Layer 3 Topology ...................................................................................................................... 103 Lab 15 Pre-Lab Setup ........................................................................................................................... 104 Lab 15 Configuration Tasks .................................................................................................................. 105

Lab 16 - ACLs and Filters for IPv4 ............................................................................................................ 109

Lab 16 Layer 2 Topology ...................................................................................................................... 110 Lab 16 Layer 3 Topology ...................................................................................................................... 111 Lab 16 Pre-Lab Setup ........................................................................................................................... 112 Lab 16 Configuration Tasks .................................................................................................................. 113

Lab 17 - Router Security ........................................................................................................................... 117

Lab 17 Layer 2 Topology ...................................................................................................................... 118 Lab 17 Layer 3 Topology ...................................................................................................................... 119 Lab 17 Pre-Lab Setup ........................................................................................................................... 120 Lab 17 Configuration Tasks .................................................................................................................. 121

Lab 18 - Router Security ........................................................................................................................... 125

Lab 18 Topology ................................................................................................................................... 126

Page 11: R&S_Volume_1_WB_v11.0_Lab2

IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam Volume 1 – Table of Contents

v1500 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. 9

Lab 18 Addressing Table ...................................................................................................................... 127 Lab 18 Pre-Lab Setup ........................................................................................................................... 128 Lab 18 Configuration Tasks .................................................................................................................. 129

Lab 19 - Router Redundancy and Network Services ................................................................................ 133

Lab 19 Topology ................................................................................................................................... 134 Lab 19 Configuration Tasks .................................................................................................................. 136

Lab 20 - Advanced Router Management .................................................................................................. 139

Lab 20 Topology ................................................................................................................................... 140 Lab 20 Pre-Lab Setup ........................................................................................................................... 141 Lab 20 Configuration Tasks .................................................................................................................. 142

Lab 21 – Quality of Service ....................................................................................................................... 145

Lab 21 Topology ................................................................................................................................... 146 Lab 21 Pre-Lab Setup ........................................................................................................................... 147 Lab 21 Configuration Tasks .................................................................................................................. 148

Lab 22 - Legacy QoS to MQC Conversion ............................................................................................... 151

Lab 22 Topology ................................................................................................................................... 152 Lab 22 Pre-Lab Setup ........................................................................................................................... 153 Lab 22 Configuration Tasks .................................................................................................................. 154

Lab 23 - Quality of Service ........................................................................................................................ 157

Lab 23 Topology ................................................................................................................................... 158 Lab 23 Addressing Table ...................................................................................................................... 159 Lab 23 Pre-Lab Setup ........................................................................................................................... 160 Lab 23 Configuration Tasks .................................................................................................................. 161

Lab 24 - Multicast ...................................................................................................................................... 165

Lab 24 Topology ................................................................................................................................... 166 Lab 24 Pre-Lab Setup ........................................................................................................................... 167 Lab 24 Configuration Tasks .................................................................................................................. 168

Lab 25 - Multicast ...................................................................................................................................... 171

Lab 25 Topology ................................................................................................................................... 172 Lab 25 Addressing Table ...................................................................................................................... 173 Lab 25 Pre-Lab Setup ........................................................................................................................... 174 Lab 25 Configuration Tasks .................................................................................................................. 175

Lab 26 - Multi-Protocol Label Switching .................................................................................................... 179

Lab 26 Topology ................................................................................................................................... 180 Lab 26 Addressing Table ...................................................................................................................... 181 Lab 26 Pre-Lab Setup ........................................................................................................................... 182 Lab 26 Configuration Tasks .................................................................................................................. 183

Lab 27 - Multiprotocol BGP ....................................................................................................................... 185

Lab 27 Topology ................................................................................................................................... 186 Lab 27 Addressing Table ...................................................................................................................... 187 Lab 27 Pre-Lab Setup ........................................................................................................................... 188 Lab 27 Configuration Tasks .................................................................................................................. 189

Lab 28 - MPLS VPN .................................................................................................................................. 191

Lab 28 Topology ................................................................................................................................... 192 Lab 28 Addressing Table ...................................................................................................................... 193 Lab 28 Pre-Lab Setup ........................................................................................................................... 194 Lab 28 Configuration Tasks .................................................................................................................. 195

Lab 29 - Inter-AS MPLS VPN.................................................................................................................... 197

Lab 29 Topology ................................................................................................................................... 198

Page 12: R&S_Volume_1_WB_v11.0_Lab2

Volume 1 – Table of Contents IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam

10 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. v1500

Lab 29 Addressing Table ...................................................................................................................... 199 Lab 29 Pre-Lab Setup ........................................................................................................................... 200 Lab 29 Configuration Tasks .................................................................................................................. 201

Lab 30 - Multicast VPN ............................................................................................................................. 203

Lab 30 Topology ................................................................................................................................... 204 Lab 30 Addressing Table ...................................................................................................................... 205 Lab 30 Pre-Lab Setup ........................................................................................................................... 206 Lab 30 Configuration Tasks .................................................................................................................. 207

Lab 31 - Layer 2 VPN ................................................................................................................................ 209

Lab 31 Topology ................................................................................................................................... 210 Lab 31 Addressing Table ...................................................................................................................... 211 Lab 31 Pre-Lab Setup ........................................................................................................................... 212 Lab 31 Configuration Tasks .................................................................................................................. 213

Lab 32 - RIPng and EIGRPv6 ................................................................................................................... 215

Lab 32 Topology ................................................................................................................................... 216 Lab 32 Pre-Lab Setup ........................................................................................................................... 217 Lab 32 Configuration Tasks .................................................................................................................. 218

Lab 33 - OSPFv3 and Multiprotocol BGP ................................................................................................. 221

Lab 33 Topology ................................................................................................................................... 222 Lab 33 Pre-Lab Setup ........................................................................................................................... 223 Lab 33 Configuration Tasks .................................................................................................................. 224

Lab 34 - Cisco IOS Firewalls..................................................................................................................... 227

Lab 34 Topology ................................................................................................................................... 228 Lab 34 Address Table ........................................................................................................................... 229 Lab 34 Pre-Lab Setup ........................................................................................................................... 230 Lab 34 Configuration Tasks .................................................................................................................. 231

Page 13: R&S_Volume_1_WB_v11.0_Lab2

IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam Volume 1 – Lab 2

v1500 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. 17

Lab 2 – Switching: Per VLAN Spanning Tree +

Technologies Covered

Etherchannel

VLAN Trunking

VTP

802.1x

Spanning-Tree

Port-security

RSPAN

Private VLANs

VLAN Maps

Overview

With four switches on the CCIE R&S lab (a combination of Catalyst 3550 and Catalyst 3560 switches with the v3.0 blueprint and four Catalyst 3560 switches on the v4.0 blueprint), there is the potential for a lot of detailed challenges in the "Switching" portion of the Routing & Switching exam. This lab is part of a series that will help prepare you for the types of scenarios you may be presented with.

Estimated Time to Complete: 3-4 Hours

Page 14: R&S_Volume_1_WB_v11.0_Lab2

Volume 1 – Lab 2 IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam

18 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. v1500

Lab 2 Topology

Page 15: R&S_Volume_1_WB_v11.0_Lab2

IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam Volume 1 – Lab 2

v1500 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. 19

Lab 2 Pre-Lab Setup

Logically connect and configure your network as displayed in the Topology Diagram. You may also refer to the Diagram located within your configuration files for topology information.

Catalyst Interconnectivity: The catalyst switches are connected via a pair of FastEthernet ports between Each other and Cat1 and Cat2 have an additional Gigabit Ethernet Connection. Please refer to the “Layer 2 Connectivity Diagram” and the “Base Connectivity Diagram” at the beginning of the workbook or in your configuration files.

You will be using the above diagrams throughout this lab.

This lab is intended to be used with online rack access provided by www.proctorlabs.com. Connect to the terminal server for the online rack, and complete the configuration tasks as detailed below.

Prerequisites:

If using your own hardware:

o Login to IPexpert.com, navigate to the “My Configs” area, download “IPexpert Routing & Switching Volume 1 Configs”, find the Lab 2 INITIAL Configs, and copy and paste the proper router/switch files to the proper devices.

If you are using ProctorLabs, Log on to your Routing & Switching vRack Web UI:

o Near the top of the web page click the “Load Lab Configs” button and choose: Volume 1 Lab 2 INITIAL

As a General Rule of Thumb we recommend you read the entire Lab before beginning.

Page 16: R&S_Volume_1_WB_v11.0_Lab2

Volume 1 – Lab 2 IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam

20 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. v1500

Lab 2 Configuration Tasks

2.1 Configure Cat3 so that you can create, modify and delete VLANs locally. The VLANs created on this switch should be propagated through the network. Use a domain name of “ipexpert”.

2.2 Cat1 should send VLAN updates with an MD5 one-way hash value. Other switches should not be able to process these updates unless they have the same MD5 value. Use a password of “1p3xp3rt#”. DO NOT use VLAN database commands to accomplish this task.

2.3 If a downstream switch does not possess a port in a VLAN that Cat1 is advertising, make sure that Cat1 does not propagate broadcast traffic for those VLANs.

2.4 Configure any interfaces connecting the switches together to appear as one link to STP per neighbor. If either of the interfaces is damaged, the switches should manage one-way links. Do not use industry standards, but make sure these links can negotiate their setup.

2.5 These links should allow all VLANs to travel across with their VLAN ID intact. You cannot use the Cisco proprietary protocol to achieve this. Every packet that traverses the link must have the VLAN ID, no exceptions.

2.6 Only allow the defined VLANs across the link.

2.7 Make sure that any unused ports do not remain in “auto” mode.

2.8 Any unused ports should be placed in VLAN567.

2.9 Enable Cat2 to authenticate 802.1x clients. The server IP address to use is 150.100.220.100 with a key of ipexpert.

2.10 Verify that Fa0/6 connected to R6 is always in an authorized state.

2.11 Configure Fa0/18 on Cat2 to check to see if the client connected is capable of 802.1x authentications.

2.12 Cat1 Fa0/5 should temporarily bypass the listening and learning stage to transition directly into a forwarding mode.

2.13 Assure that Cat2 becomes the root switch for VLAN100 with one command.

2.14 Configure Fa0/5 that R5 connects to so that the switch will only allow this learned MAC address to communicate through this port. If any other MAC addresses are learned on this port Cat2 should shut it down for a period of three hours.

Page 17: R&S_Volume_1_WB_v11.0_Lab2

IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam Volume 1 – Lab 2

v1500 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. 21

2.15 You have installed a Cisco® Intrusion Protection System on Fa0/7 of Cat1 and you would like to test out its functionality. Configure the Switch to take traffic that is received on VLAN300 and send a copy to your IPS.

2.16 Configure VLAN567 to be in the IP Subnet 150.100.220.0/28. IP traffic should be routed. All switches will have an IP in VLAN567. Use .11, .12, .13, and .14 respectively

2.17 Configure all switches to be optimized for unicast routing.

2.18 Configure OSPF between R5, R6, R7 and all four of your switches. Place VLAN 567, 100, 40, and 300 into the OSPF routing process. You may use Area 0 everywhere. Add interfaces on the switches for each of these VLANs. Use .11, .12, .13, and .14 respectively.

2.19 Configure R5, R6, Cat1, and Cat2 to receive their time from R7. All of the devices should be in CST (-6) as well as adjust for Day Light Savings.

2.20 Configure Cat1 to age out MAC addresses 50 seconds longer than the default value for devices in VLAN 567.

2.21 On Cat1, create VLAN 86, assign ports Fa0/14, 15, 16, and 17 to this VLAN. This VLAN belongs to the IT department, make sure that these ports bypass listening and learning state, DO NOT use VLAN database to create the VLAN. A Smart Port macro should be used to create the VLAN and assign the ports and the configuration to the VLAN.

2.22 Configure Cat1 such that if port Fa0/14 receives BPDU packets it should transition into down/down err-disable state.

2.23 Configure Cat3 & Cat4 such that if ports Fa0/15 and/or Fa0/16 receive BPDU packets they should transition into down/down err-disable state, and they should stay in that state for a period of 380 seconds. After 380 seconds they should automatically recover and transition into UP/UP state; however, if these ports receive BPDU packets again, the cycle should be repeated.

2.24 You would like to monitor the activity on port Fa0/18 of Cat2, as clients connect their laptops to this port. Configure the switch such that when it learns/removes a MAC address an SNMP notification is generated and sent to the Network Management Server at 150.100.40.40. Since this is a very busy network, setup a trap interval so these messages are sent every 120 seconds with up to 50 entries, in order to reduce the bandwidth consumption. Use a read only SNMP community of “Port18”.

2.25 In Cat3 and Cat4, ensure that ports Fa0/12 and Fa0/13 are in VLAN 90, DO NOT use the VLAN database or any global configuration mode command to create this VLAN. Ensure that these ports cannot communicate with each other even though they are in the same VLAN.

Page 18: R&S_Volume_1_WB_v11.0_Lab2

Volume 1 – Lab 2 IPexpert Lab Preparation Workbook for the CCIE R&S Lab Exam

22 Copyright © 2010 by IPexpert, Inc. All Rights Reserved. v1500

An SVI should be created so hosts can reach the outside world. Use 150.100.90.0/24 as the network and .13 and .14 respectively.

2.26 Ensure that only the following traffic is allowed to pass through VLAN 12

All non-IP frames sourced from MAC-address 000b.cd96.cc4f destined to any host

OSPF traffic and ICMP traffic

All other frames should be denied

2.27 Make sure that VLAN 40 will only carry IPv6 traffic. All other traffic should be discarded.

2.28 On Cat3, ports Fa0/6 through Fa0/10 will utilize the 200.200.200.0/24 subnet. Allow ports Fa0/6 and Fa0/7 to talk to each other, but no other devices in this subnet should be allowed to speak intra-VLAN to each other. Create a VLAN interface to be used as the gateway out for this subnet as 200.200.200.200/24. Additional VLANs may be created.

2.29 Except in VLAN 100, Cat3 should not have any ports blocked by spanning tree.

2.30 In the event that Cat2 loses its link to Cat3, the path to the root bridge should go through Cat4 as quickly as possible. Do not use any “cost” or “priority” type commands on Cat2 to make this happen.

Technical Verification and Support

To verify your router and switch configurations please ensure that you have downloaded the latest configurations from your www.IPexpert.com account.

You may also verify your configurations within the Volume One Proctor Guide that you received along with this Workbook. You can find this document in the eBook section of your www.IPexpert.com account.

Support is also available in the following ways:

Mailing List: http://www.OnlineStudyList.com

Email: [email protected]