Connections, addressing and common configuration rules.

Size: px

Start display at page:

Download "Connections, addressing and common configuration rules."

Emery Farmer
5 years ago
Views:

1 Lab #2 r9-1 r7 Lab 2 BGP AS 100 VLAN_21 r5 e1 3/11 fa0/0.25 fa0/0.15 3/6 2/1 2/1 VLAN_25 VLAN_15 IGRP AS 5 OSPF Area 5 BGP AS ISDN 3/1 504 Frame-Relay OSPF Area 0 VLAN_ EIGRP AS 6 r9-0 OSPF Area 2 BGP AS 150 r2 s1 BGP AS s1 OSPF OSPF Area 23 OSPF Area 14 Area 111 s0/1 r1 s1 OSPF Area 33 r4 r3 to0/0 to0 Ring 4 s0/0 r3 Ring 3 s0 /0 b0/0 3/4 3/3 VLAN_14 VLAN_ c11 OSPF Area fxs0/0 b0/0 s0/0 3/2 s0/0 /0 r6 3/10 3/5 VLAN_16 OSPF Area 6 to0/0 Ring 6 fxs0/0 BGP AS Connections, addressing and common configuration rules. All physical connections, interface type and interface numbers, frame-relay dlci, router names are on the figure. All interfaces of frame-relay switch are DCE. On serial lines between other routers DTE/DCE should be detected. Frame-relay switch is emulated by Cisco AGS+ router. Router r1 connected to interface serial 1 AGS+, router r2 to serial 2 and, so on up to router r7 which is connected to interface serial 7 AGS+. ISDN switch-type is basic-ni, and all others parameters can be found at the table below.

2 r4 bri0/0 r5 bri0/0 spid DN spid DN All Ethernet interfaces are physically connected to Catalyst The Catalyst 5000 has one 24-port 10BaseT Ethernet card (WS-X5010) and one 12 port 100BaseTX Ethernet card (WS-X5113). All Fast Ethernet ports are connected to 100 Mbit card and all Ethernet ports are connected to 10 Mbit card. Port numbers are shown on the figure but it is recommended to detect port numbers from the Catalyst 5000 console. For Token Ring use ring speed 4 Mb. Router r9 is Cisco AGS+ router with 3 Ethernet, 1 Token Ring and 10 Serial. R9 serial interfaces 1-7 used for frame-relay switch emulation. R9 Ethernet interfaces used to provide source of information for different routing protocol, so router r9-0 is router interface Ethernet 0 on r9, r9-1 is router interface Ethernet 1 on r9. Use subinterfaces at frame-relay. Use this addressing schema if one not specified. Use /30 subnet mask on all serial and ISDN interfaces. Use /28 subnet on frame-relay links, use /24 mask on all Ethernet and Token Ring segments. Use /26 subnet mask on all routers loopback interfaces. Use router number as 4 th octet in IP address for Ethernet, Token Ring and Frame-relay. Use first available network address for router with less number and second available network address for router with greater number on networks with other than /24 mask (/26, /28). Phones are connected to ports 0/0. Use phone numbers 501,502 for ports on r5 and 601,602 for ports on r6. For IPX addressing use the following rules. For internal network MAC addresses use 00xx.xxxx.xxxx where x is router number. For point-to-point links use two-digit network number xy, where x is number of first router and y is number of second router. For frame-relay - use three or four digit number where each digit is router number. Use five digit number for internal network where each digit is a router number. For Ethernet or Token Ring LAN - use ipx network number from vlan number and ring number. You have one class B IP network for addressing your network You may subnet it. VLAN_21 in AS 100 have subnetted class B IP network /24. Recommendations: Put password on all console lines and vty lines. Use moon as password. That will be polite to all future users. I am not sure that you want start the lab by breaking passwords of previous lab users. You may configure all routers by yourself or you can load some or even all configs to take a look how it should be worked. We recommend using these configs on r7 and r9. It will make life easier and save time. But using these configs is absolutely up to you. IP connectivity 2

3 3 Draw your own picture of the lab or just add IP addresses to figure of lab. Configure all routers according to the schema on the figure. Test that all needed interfaces are up and ping-able from other side of the link. Make exclusion for pinging some interfaces on r9 because r9 is just a source of information for other routers. When finished with lab check this again. Frame-relay Configure R9 as frame-relay switch. Use ietf type of frame-relay encapsulation and ansi type of frame-relay lmi-type. Name all DLCI as three digit number where first digit will be source interface number on AGS+ (and source router number in the same time), second digit will be 0 and third digit will be destination interface number (and destination router number in the same time). Configure excessive number of dlci-s. Suppose that we use serial interfaces 1-7, each interface should have 6 dlci-s. Use subinterfaces on r3, r4, r5, r6. ISDN Use ISDN as additional connection between router r5 and r4. Configure DDR for OSPF. Use authentication chap. Check isdn line status and dialer reasons. Configuring r4 as callback server. Catalyst All Ethernet interfaces are shown on the schema, but you also may use CDP protocol at Catalyst console to detect which router is connected to which port. Create all VLANs as shown at figure. VTP domain name LAB. Move ports to VLANs (see figure). Move interface Ethernet 0 on r9 to VLAN_16, Ethernet 1 on r9 move to VLAN_21. Give each vlan name as shown on schema. Use trunk on r5 interface FastEthernet 0/0. Trunk should contain only these vlan 1,15,25. Put sc0 interface of Catalyst 5000 in VLAN_14 as it shown on schema. Set IP address /24. Check that you can ping all routers. Create vlans for two Token Ring rings and leave this vlans empty. IP Routing. Run OSPF area 0 - on frame-relay and ISDN; area 3 - on VLAN_13; area 33 - on Ring 3; area 23 - between r2 and r3; area 2 - on VLAN_22; area 4 - on VLAN_14 and on ring 4;

4 area 14 - between r1 and r4; area 5 - on VLAN_15; area 6 - on ring 6. Do authentication on OSPF area 0. Configure loopback 0 on routers r1-7 that have address x.1/32 where x is router number. Area 23 is transit area for area 2. Area 2 should have virtual link to area 0. Configure loopback on r1 with address /24. Put it to OSPF area 111. Area 14 is transit area for area 111. Area 111 should have virtual link to area 0. Configure loopback on r2 with ip address /24. Redistribute it to OSPF. Use EIGRP on VLAN_16. Use IGRP on VLAN_25. Create loopback on r9. Use address x.9/24 where x is 0-9. Put this interfaces into EIGRP. Configure loopback on r7 with ip address /24. Put it into IGRP. Make redistribution between EIGRP and OSPF on r6, and between IGRP and OSPF on r5. Try to get as many routes on r7 and r9 as possible. Configure r4 OSPF to send default information always. Configure r5 so that r7 has default IGRP route. Configure r6 so that r9 has default EIGRP route. Try to ping from r7 and from r9. R9-1 - BGP AS 100. R1, r4, r5 - BGP AS Make them all connected to each other. R2, r3 - BGP AS R6 - BGP AS Connect r4 to r3 and to r6 as EBGP. R9-1 should see 65005, and as one AS 150. AS100 connected to AS 150 (65005, and 65007) between r9-1 and r1. Do not run any routing protocols on links r1 and r9-1. Create loopback on r9. Assign IP addresses x.9 where x is 0-9. Create loopback on r9. Assign IP addresses x.9 where x is 0-5. Put networks x.0/24 and x.0/24 to BGP AS 100. But put x.0/24 with network command, x.0/24 as redistributed connected. Then see differences in bgp table on r4 (origin). Filter out on r1 all incoming route except , , and Create static route to on r6 (use as next hop ip address from Ethernet 0 on r9). Create loopback with ip address on r9. Redistribute static routes to bgp AS Create static route to on r2 (use as next hop any ip address from VLAN_22). Redistribute static routes to bgp AS R9 should receive BGP routes to and Source AS should be 150. Make BGP summary to classful network on r1 for routes x.x. Configure EIGRP summary route on r6 so r9 get classful route to network /16. Do ospf summary addresses for routes x.x on r6. 4

5 Configure lopbacks on r5 with ip addresses x.1/24 where x is 1-5. Put this addresses into OSPF area 5. Then make summary for these routes to /16. Change default cost for OSPF on interface Ethernet 0 r2 to 2, on interface Ethernet 0 r3 to 3, on interface Ethernet 0/0 r4 to 4. Do it a different way on each router. Firewall / IP access lists Configure access-list that have following requirement: - disable icmp ping but enable trace trom r6 to r1 loopback 0. But Try trace from r6 to r1 loopback 0 should still be available. - other traffic is allowed. Put this access list on serial 0/0 on r6. DLSW+ Use tcp encapsulation and virtual ring 100. Configure dlsw between Ring 3 and Ring 4. Configure dlsw between VLAN_14 and VLAN_16. Configure bridging between VLAN_14 and Ring 4. Make possible on-demand connection between VLAN_16 and Ring 3. Do not configure connection between VLAN_16 and Ring 3. Do border peer on r4. VPN tunneling. Configure tunnel between r1 and r6 loopbacks. Use IPSec to encrypt all traffic in this tunnel. Use pre-shared keys. Voice over IP Phones are connected to ports 0/0. Use phone numbers 501,502 for telephone connected to r5 and 601,602 for telephone connected to r6. Configure r5 and r6 so you be able call each other. IPX Routing Configure IPX on all routers. Do not configure IPX on ISDN and on Ethernet1 r9. NLSP VLAN_22, VLAN_13, Ring 3, serial link between r2 and r3. Use IPX RIP on others LANs, rings and ISDN. Use any protocol on frame-relay. Configure IPX network 16 on interface Ethernet 0 on r9. Configure IPX routes BAD00-09 on loopbacks Configure IPX routes DAD00-DAD09 on loopbacks Configure IPX routes ACE00-ACE09 on loopbacks Sent all this routers with RIP to Ethernet0. 5

6 6 On r6 do route filtering to receive only routes ACE00-ACE09. Configuring two static SAP for file servers PSERVER1 and PSERVER2 on r7, and two static SAP for print-server FSERVER1 and FSERVER2 on r9. Check that all routers can see these SAPs. HTTP Server Configure HTTP server on r6 to be able configuring r6 via http. DHCP server Configure DHCP server for VLAN_14. Set as default gateway IP address of interface Ethernet 0/0 r4. Set NETBIOS node type h. Set DNS servers and DHCP may use addresses Set dhcp address lease time to 5 days. Troubleshooting Clear all routers and switch configurations. Use configuration files stored in Tshooting batch configs folder. Try to find out as much faults as possible. Make list of this faults. Compare your list to list in file Lab2 Error list.txt. Tips If you will use batch files for configuring routers, then keep in mind that you will need to set some delay between entering lines. It is needed to avoid input buffer overflowing. If you use HyperTerminal Private Edition then it is: Property for connection, then Settings, then ASCII setup and Line delay. Set value and it should help. You can find answers to most of your questions at Cisco web site. On the next page, there are links that may help save time. Use notepad to prepare something like the template that has common commands for all routers. Use aliases to save time. Your can find few examples below: alias exec c conf t alias exec w write alias exec z show running alias exec i show ip route alias exec x show ipx route alias exec o show ip ospf alias exec e show ip eigrp alias exec b show ip bgp alias exec ib show ip int brief alias exec xb show ip int brief alias exec xs show ip ipx servers

7 alias exec d clear ip route * alias exec q clear ip bgp * To detect type (DTE/DCE) of serial interface use command show controllers serial N. N is number of serial inteface. To find out what port of Catalyst 5000 belong to what router use command show cdp neighbors. At this moment router should have hostname and Ethernet interface should be up. Be sure that cdp is running on this interface. For some reason I could not see Fast Ethernet ports from r5 and r6 with cdp, but you can see them on schema. Use extended trace to save time. One of parameters make trace shorter that default 30 times (Maximum Time to Live). For access-lists in point of view of voice we should know that phone call setup 2 tcp connection. One is port greater that as source and port 1720 as destination and second is connection that use both ports greater that Any IPX routing protocol for frame-relay almost always mean EIGRP because of split horizon. Do not forget that if you use authentication on area 0 than you should do this on virtual link too. And do not forget issue command area 0 authentication on routers that are connected to area 0 through virtual link too. Do not forget to say area 0 authentication on routers that do not have area 0 but have virtual-link to area 0. Command router-id can help to avoid mistakes that could appear when new interface will be added will not ping from r7 and from r9 till you do redistribute connected networks to OSPF. 7

8 Links Understanding Frame Relay Subinterfaces Frame Relay Traffic Shaping Performance Management Commands Sample Configuration - Snapshot Routing over ISDN Snapshot Routing Snapshot Routing: Frequently Asked Questions Configuring Snapshot Routing Dynamic IP Routing Dynamic IPX Routing Configuring Dynamic and Static Mapping for Multipoint Subinterfaces Initial Configurations for OSPF over Frame Relay Subinterfaces Designing DLSw+ Internetworks Basic DLSw+ Configurations Understanding and Troubleshooting Common Novell IPX Issues Mobility and Mobile IP Local-Area Mobility Configuring Mobile IP

Connections, addressing and common configuration rules.

Connections, addressing and common configuration rules. Lab #1 r9-1 s2 e1 3/11 VLAN_21 BGP AS 100 s1 3/1 e0 s0 e0 3/2 s1 VLAN_22 BGP AS 200 r1 r2 Ring 4 r4 s0/1 r3 to0/0 s0/0 s0 s1 OSPF Area 33 to0 e0/0 e0 OSPF Area 4 3/4 b0/0 3/3 VLAN_14 VLAN_13 403 304 c15