SlideShare uma empresa Scribd logo
1 de 29
Baixar para ler offline
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 127
1.1 SWITCH ADMINISTRATION
Configure the ACME headquarters network (AS 12345) as per the following requirements
 The VTP domain must be set to CCIE
 Use VTP version 2
 SW1 must be the VTP server and SW2 must be the VTP client
 Secure all VTP update with an MD5 digest of the ASCII string CCIErock$
 In order to avoid as much as possible unknown unicast flooding in all VLANs the administrator
requires that any dynamic entries learned by either SW1 to SW2 must be retained for 2 hours
before being refresh,
Configure the network of the new York office (AS 34567) as per the following requirements
 The VTP domain must be set to CCIE
 Use VTP version 2
 SW3 and SW4 must no advertise their VLAN configuration but must forward VTP advertisement
that they receive out their trunk ports
 Secure all VTP update with an MD5 digest of the ASCII string CCIErock?
DIAGRAM:
Internet SP
BGP 30000R20
R2 R3
R4 R5
R1
R7R6
SW1 SW2
R8 R9
R10 R11
SW3 SW4
ACME HQ
SAN FRANCISCO
BGP AS 12345
123.10.1.X/30
ACME
NEW YORK
BGP AS 34567
123.10.2.X/30
ACME
SAN JOSE
BGP AS 65112 101.1.123.2/30
5x VPN
E0/0
102.2.123.2/30
5x VPN
E0/0
E0/3 .1 E0/1 .9 E0/1 .10
E0/2 .17
E0/0 .2
E0/1 .18
VLAN 23
VLAN 24
E0/3.5E0/1 .6
5x VPN
5x VPN
E0/0 .2
E0/2 .13
E0/2 .14
VLAN 35
E0/1 .1 E0/2 .5 E0/1 .6VLAN 14 VLAN 15
VLAN 67
E0/2 .21
E0/2 .22
VLAN 46 VLAN 57
E0/0 .29
E0/2 .30
E0/1 .25 E0/1 .26
E0/0 .2
3x VPN
201.1.123.2/30
E0/0 .2
3x VPN
202.2.123.2/30
101.1.34.2/30
E0/0
E0/1 .5
E0/1 .18
S38 .6
S310 .17
VLAN 38
VLAN 310
VLAN 34
S34 .13 S34 .14
VLAN 89
E0/2 .1 E0/1 .2
102.1.34.2/30
E0/0
VLAN 49
S49 .10
E0/2 .9
S411 .21
VLAN 411
E0/2 .22
VLAN 111
E0/2 .25 E0/1 .26
E0/0 .2
201.1.34.2/30
E0/0 .2
202.2.34.2/30
33.34.4.2/30
E1/0
33.34.3.2/30
E1/0
10.2.19.1/24
SOLUTION:
SW1:
CCIERNSTRICKS.COM_H1.1_SW1(config)#
CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP domain CCIE
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 128
CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP mode server
CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP version 2
CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP password CCIErock?
TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER
CCIERNSTRICKS.COM_H1.1_SW1(config)#Mac-address again 7200
SW2:
CCIERNSTRICKS.COM_H1.1_SW2(config)#VTP domain CCIE
CCIERNSTRICKS.COM_H1.1_SW2(config)#VTP mode client
CCIERNSTRICKS.COM_H1.1_SW2(config)#VTP password CCIErock?
TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER
CCIERNSTRICKS.COM_H1.1_SW2(config)#Mac-address again 7200
SW3
CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP domain CCIE
CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP version 2
CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP mode transparent
CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP password CCIErock$
TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER
SW4:
CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP domain CCIE
CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP version 2
CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP mode transparent
CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP password CCIErock$
TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 129
1.2 LAYER 2 PORTS
Configure your network as per the following requirements
Complete the configuration of all VLANs so that all routers those are located in ACME's
Headquarters (AS12345) and New York office (AS 34567) can ping their directly connected neighbors
 All four switches (SW1-SW4) must have dot1q trunks that do not rely on negotiation do not
configure any etherchannel
 Ensure that the following unused ports on all four switches are shutdown and
 Configured as access ports in VLAN 999
E3/0 - E3/3 are unused on SW1 and SW2
E1/0 - E1/3 are unused on SW3 and SW4
E3/0 - E3/3 are unused on SW3 and SW4
DIAGRAM:
Internet SP
BGP 30000R20
R2 R3
R4 R5
R1
R7R6
SW1 SW2
R8 R9
R10 R11
SW3 SW4
ACME HQ
SAN FRANCISCO
BGP AS 12345
123.10.1.X/30
ACME
NEW YORK
BGP AS 34567
123.10.2.X/30
ACME
SAN JOSE
BGP AS 65112 101.1.123.2/30
5x VPN
E0/0
102.2.123.2/30
5x VPN
E0/0
E0/3 .1 E0/1 .9 E0/1 .10
E0/2 .17
E0/0 .2
E0/1 .18
VLAN 23
VLAN 24
E0/3.5E0/1 .6
5x VPN
5x VPN
E0/0 .2
E0/2 .13
E0/2 .14
VLAN 35
E0/1 .1 E0/2 .5 E0/1 .6VLAN 14 VLAN 15
VLAN 67
E0/2 .21
E0/2 .22
VLAN 46 VLAN 57
E0/0 .29
E0/2 .30
E0/1 .25 E0/1 .26
E0/0 .2
3x VPN
201.1.123.2/30
E0/0 .2
3x VPN
202.2.123.2/30
101.1.34.2/30
E0/0
E0/1 .5
E0/1 .18
S38 .6
S310 .17
VLAN 38
VLAN 310
VLAN 34
S34 .13 S34 .14
VLAN 89
E0/2 .1 E0/1 .2
102.1.34.2/30
E0/0
VLAN 49
S49 .10
E0/2 .9
S411 .21
VLAN 411
E0/2 .22
VLAN 111
E0/2 .25 E0/1 .26
E0/0 .2
201.1.34.2/30
E0/0 .2
202.2.34.2/30
33.34.4.2/30
E1/0
33.34.3.2/30
E1/0
10.2.19.1/24
SOLUTION:
SW1:
CCIERNSTRICKS.COM_H1.1_SW1(config)#Vlan 14,15,23,24,35,46,57,67,999
TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING
VLAN ACCORDINGLY.
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/0
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 130
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 14
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/1
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 23
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/2
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 23
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/3
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 24
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/0
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 14
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/1
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 15
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/2
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 67
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/3
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 67
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/0
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/1
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/2
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 131
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/3
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW1(config)#Interface range eth 2/0-3
CCIERNSTRICKS.COM_H1.1_SW1(config)#switchport trunk encapsulation dot1q
CCIERNSTRICKS.COM_H1.1_SW1(config)#switchport mode trunk
CCIERNSTRICKS.COM_H1.1_SW1(config)#switchport nonegotiate
SW2:
TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING
VLAN ACCORDINGLY.
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/0
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 15
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/1
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 24
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/2
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 35
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/3
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 46
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/0
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 57
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/1
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 35
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 132
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/2
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 46
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/3
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 57
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/0
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/1
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/2
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/3
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW2(config)#Interface range eth 2/0-3
CCIERNSTRICKS.COM_H1.1_SW2(config)#switchport trunk encapsulation dot1q
CCIERNSTRICKS.COM_H1.1_SW2(config)#switchport mode trunk
CCIERNSTRICKS.COM_H1.1_SW2(config)#switchport nonegotiate
SW3:
CCIERNSTRICKS.COM_H1.1_SW3(config)#Vlan 34,38,49,89,111,310,411,999
TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING
VLAN ACCORDINGLY.
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/0
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 133
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 38
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth0/1
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 89
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth0/2
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 310
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth0/3
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 111
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth1/0
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth1/1
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/2
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth1/3
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/0
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/1
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 134
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/2
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/3
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#Interface range eth 2/0-3
CCIERNSTRICKS.COM_H1.1_SW3(config)#switchport trunk encapsulation dot1q
CCIERNSTRICKS.COM_H1.1_SW3(config)#switchport mode trunk
CCIERNSTRICKS.COM_H1.1_SW3(config)#switchport nonegotiate
IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE
INTERFACES SHOUTDOWN THEN MAKE THEM UP
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan34
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan38
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan310
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown
SW4:
CCIERNSTRICKS.COM_H1.1_SW4(config)#Vlan 34,38,49,89,111,310,411,999
TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING
VLAN ACCORDINGLY.
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/0
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 89
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/1
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 49
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 135
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/2
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 111
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/3
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 411
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/0
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/1
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/2
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/3
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth3/0
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/1
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth3/2
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 136
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth3/3
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown
CCIERNSTRICKS.COM_H1.1_SW4(config)#Interface range eth 2/0-3
CCIERNSTRICKS.COM_H1.1_SW4(config)#switchport trunk encapsulation dot1q
CCIERNSTRICKS.COM_H1.1_SW4(config)#switchport mode trunk
CCIERNSTRICKS.COM_H1.1_SW4(config)#switchport nonegotiate
IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE
INTERFACES SHOUTDOWN THEN MAKE THEM UP
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan34
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan49
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown
CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan411
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown
AFTER CONFIGURATION OF ALL ABOVE TASK PLEASE MAKE SURE THAT ALL DEVICES IN AS 12345 AND AS
34567 ARE ABLE TO PING ITS DIRECTLY CONNECTED NEIGHBORS
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 137
1.3 SPANNING TREE
Configure the ACME network as per the following requirements.
 SW1 must be the root switch for all odd vlans and must be the backup for all even vlans
 SW2 must be the root switch for all even vlans and must be the backup for all odd vlans
 SW3 must be the root switch for all odd vlans and must be the backup for all even vlans
 SW4 must be the root switch for all even vlans and must be the backup for all odd vlans
 Explicitly configure the root and backup roles, assuming that other switches with default
configuration may eventually be added in the network in the future
 All switches must maintain one STP instance per vlan
 Use the STP mode that has only three possible states
 All access ports must immediately transitioned to the forwarding state upon link up and they
must still participate in STP. Use single command per switch to enable this
 Access ports must automatically shut down if they receive any BPDU and an administrator must
still manually re-enable the port. Use a single command per switch to enable this feature.
DIAGRAM:
Internet SP
BGP 30000R20
R2 R3
R4 R5
R1
R7R6
SW1 SW2
R8 R9
R10 R11
SW3 SW4
ACME HQ
SAN FRANCISCO
BGP AS 12345
123.10.1.X/30
ACME
NEW YORK
BGP AS 34567
123.10.2.X/30
ACME
SAN JOSE
BGP AS 65112 101.1.123.2/30
5x VPN
E0/0
102.2.123.2/30
5x VPN
E0/0
E0/3 .1 E0/1 .9 E0/1 .10
E0/2 .17
E0/0 .2
E0/1 .18
VLAN 23
VLAN 24
E0/3.5E0/1 .6
5x VPN
5x VPN
E0/0 .2
E0/2 .13
E0/2 .14
VLAN 35
E0/1 .1 E0/2 .5 E0/1 .6VLAN 14 VLAN 15
VLAN 67
E0/2 .21
E0/2 .22
VLAN 46 VLAN 57
E0/0 .29
E0/2 .30
E0/1 .25 E0/1 .26
E0/0 .2
3x VPN
201.1.123.2/30
E0/0 .2
3x VPN
202.2.123.2/30
101.1.34.2/30
E0/0
E0/1 .5
E0/1 .18
S38 .6
S310 .17
VLAN 38
VLAN 310
VLAN 34
S34 .13 S34 .14
VLAN 89
E0/2 .1 E0/1 .2
102.1.34.2/30
E0/0
VLAN 49
S49 .10
E0/2 .9
S411 .21
VLAN 411
E0/2 .22
VLAN 111
E0/2 .25 E0/1 .26
E0/0 .2
201.1.34.2/30
E0/0 .2
202.2.34.2/30
33.34.4.2/30
E1/0
33.34.3.2/30
E1/0
10.2.19.1/24
SOLUTIONS:
SW1:
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree mode rapid-pvst
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree portfast default
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree portfast bpduguard default
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree vlan 1,15,23,35,57,67,999 priority 0
CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree vlan 14,24,46 priority 4096
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 138
SW2:
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree mode rapid-pvst
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree portfast default
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree portfast bpduguard default
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree vlan 1,15,23,35,57,67,999 priority 4096
CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree vlan 14,24,46 priority 0
SW3:
CCIERNSTRICKS.COM_H1.1_SW3(config)#Spanning-tree mode rapid-pvst
CCIERNSTRICKS.COM_H1.1_SW3(config)#Spanning-tree portfast default
CCIERNSTRICKS.COM_H1.1_SW3(config)#Spanning-tree portfast bpduguard default
CCIERNSTRICKS.COM_H1.1_SW3(config)#spanning-tree vlan 1,49,89,111,411,999 priority 0
CCIERNSTRICKS.COM_H1.1_SW3(config)#spanning-tree vlan 34,38,310 priority 4096
SW4:
CCIERNSTRICKS.COM_H1.1_SW4(config)#Spanning-tree mode rapid-pvst
CCIERNSTRICKS.COM_H1.1_SW4(config)#Spanning-tree portfast default
CCIERNSTRICKS.COM_H1.1_SW4(config)#Spanning-tree portfast bpduguard default
CCIERNSTRICKS.COM_H1.1_SW4(config)#spanning-tree vlan 1,49,89,111,411,999 priority 4096
CCIERNSTRICKS.COM_H1.1_SW4(config)#spanning-tree vlan 34,38,310 priority 0
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 139
1.4 WAN SWITCHING
The WAN links must rely on a layer 2 protocol that supports link negotiation and authentication.
 The Service provider expects both R18 and R19 to complete three way hand shake by providing
the expected response of a challenge that is sent by AS 20003 Router
 R18 must use the username ACME-R18 and password CCIE
 R19 must use the username ACME-R19 and password CCIE
DIAGRAM:
SOLUTIONS:
R18:
CCIERNSTRICKS.COM_H1.1_R18(config)#int s1/0
CCIERNSTRICKS.COM_H1.1_R18(config)# no shutdown
CCIERNSTRICKS.COM_H1.1_R18(config-if)#encap ppp
CCIERNSTRICKS.COM_H1.1_R18(config-if)#no peer neighbor-route
CCIERNSTRICKS.COM_H1.1_R18(config-if)#ppp chap hostname ACME-R18
CCIERNSTRICKS.COM_H1.1_R18(config-if)#ppp chap password CCIE
R19:
CCIERNSTRICKS.COM_H1.1_R19(config)#int s1/0
CCIERNSTRICKS.COM_H1.1_R19(config)# no shutdown
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 140
CCIERNSTRICKS.COM_H1.1_R19(config-if)#encap ppp
CCIERNSTRICKS.COM_H1.1_R19(config-if)#no peer neighbor-route
CCIERNSTRICKS.COM_H1.1_R19(config-if)#ppp chap hostname ACME-R19
CCIERNSTRICKS.COM_H1.1_R19(config-if)#ppp chap password CCIE
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 141
SECTION II LAYER 3 TECHNOLOGIES
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 142
2.1 OSPF IN AS12345
Configure OSPFv2 area 0 in ACME HQ (AS12345) according to the following requirements:
 Configure the OSPF process id to 12345 and set the router id to interface lo0 on all seven
routers
 The interface lo0 at each router must be seen as an internal OSPF prefix by all other routers
 Ensure that OSPF is not running on any interface that is facing another AS. use any method to
accomplish this requirement
 SW1 and SW2 must not participate in routing at all
 Do not change the default OSPF cost of any interface in AS12345
 Ensure that R1 must see OSPF routes in routing table as STUB, it is not order you configure R1 in
STUB area, just make sure R1 won't be a Transit router of Traffics R1 is not Source or Destination
 R1 must see the following OSPF routes in the routing table
R1#sh ip route OSPF
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
123.0.0.0/8 is variably subnetted, 17 subnets, 2 masks
O 123.2.2.2/32 [110/65546] via 123.10.1.2, 00:03:57, Ethernet0/1
O 123.3.3.3/32 [110/65546] via 123.10.1.6, 00:03:31, Ethernet0/2
O 123.4.4.4/32 [110/65536] via 123.10.1.2, 00:04:07, Ethernet0/1
O 123.5.5.5/32 [110/65536] via 123.10.1.6, 00:03:31, Ethernet0/2
O 123.6.6.6/32 [110/65546] via 123.10.1.2, 00:03:04, Ethernet0/1
O 123.7.7.7/32 [110/65546] via 123.10.1.6, 00:02:36, Ethernet0/2
O 123.10.1.8/30 [110/65555] via 123.10.1.6, 00:03:31, Ethernet0/2
[110/65555] via 123.10.1.2, 00:03:57, Ethernet0/1
O 123.10.1.12/30 [110/65545] via 123.10.1.6, 00:03:31, Ethernet0/2
O 123.10.1.16/30 [110/65545] via 123.10.1.2, 00:04:07, Ethernet0/1
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 143
O 123.10.1.20/30 [110/65545] via 123.10.1.2, 00:03:57, Ethernet0/1
O 123.10.1.24/30 [110/65555] via 123.10.1.6, 00:02:36, Ethernet0/2
[110/65555] via 123.10.1.2, 00:01:56, Ethernet0/1
O 123.10.1.28/30 [110/65545] via 123.10.1.6, 00:03:31, Ethernet0/2
R1#
DIAGRAM:
R2 R3
R4 R5
R1
R7R6
SW1 SW2
ACME HQ
SAN FRANCISCO
BGP AS 12345
123.10.1.X/30
101.1.123.2/30
5x VPN
E0/0
102.2.123.2/30
5x VPN
E0/0
E0/3 .1 E0/1 .9 E0/1 .10
E0/2 .17
E0/0 .2
E0/1 .18
VLAN 23
VLAN 24
E0/3.5
E0/2 .13
E0/2 .14
VLAN 35
E0/1 .1 E0/2 .5 E0/1 .6VLAN 14 VLAN 15
VLAN 67
E0/2 .21
E0/2 .22
VLAN 46 VLAN 57
E0/0 .29
E0/2 .30
E0/1 .25 E0/1 .26
E0/0 .2
3x VPN
201.1.123.2/30
E0/0 .2
3x VPN
202.2.123.2/30
SOLUTIONS:
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 144
R1:
CCIERNSTRICKS.COM_H1.1_R1(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R1(config-router)#router-id 123.1.1.1
CCIERNSTRICKS.COM_H1.1_R1(config-router)#network 123.1.1.1 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R1(config-router)#network 123.10.1.5 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R1(config-router)#network 123.10.1.1 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R1(config-router)#max-metric router-lsa
R2:
CCIERNSTRICKS.COM_H1.1_R2(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R2(config-router)#router-id 123.2.2.2
CCIERNSTRICKS.COM_H1.1_R2(config-router)#network 123.2.2.2 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R2(config-router)#network 123.10.1.9 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R2(config-router)#network 123.10.1.17 0.0.0.0 area 0
R3:
CCIERNSTRICKS.COM_H1.1_R3(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R3(config-router)#router-id 123.3.3.3
CCIERNSTRICKS.COM_H1.1_R3(config-router)#network 123.3.3.3 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R3(config-router)#network 123.10.1.10 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.13 0.0.0.0 area 0
R4:
CCIERNSTRICKS.COM_H1.1_R4(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R4(config-router)#router-id 123.4.4.4
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.4.4.4 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.2 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.18 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.21 0.0.0.0 area 0
R5:
CCIERNSTRICKS.COM_H1.1_R5(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R5(config-router)#router-id 123.5.5.5
CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.5.5.5 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.10.1.6 0.0.0.0 area 0
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 145
CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.10.1.14 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.10.1.29 0.0.0.0 area 0
R6:
CCIERNSTRICKS.COM_H1.1_R6(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R6(config-router)#router-id 123.6.6.6
CCIERNSTRICKS.COM_H1.1_R6(config-router)#network 123.6.6.6 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R6(config-router)#network 123.10.1.22 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R6(config-router)#network 123.10.1.25 0.0.0.0 area 0
R7:
CCIERNSTRICKS.COM_H1.1_R7(config)#router ospf 12345
CCIERNSTRICKS.COM_H1.1_R7(config-router)#router-id 123.7.7.7
CCIERNSTRICKS.COM_H1.1_R7(config-router)#network 123.7.7.7 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R7(config-router)#network 123.10.1.26 0.0.0.0 area 0
CCIERNSTRICKS.COM_H1.1_R7(config-router)#network 123.10.1.30 0.0.0.0 area 0
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 146
2.2 EIGRP IN AS34567
Configure EIGRP for ipv4 in the New York office (AS34567) according to the following requirements
 The EIGRP AS is 34567
 The interface lo0 must be seen as an internal EIGRP prefix by all other routers
 Ensure the EIGRP is not running on any interface that is facing another AS use any method to
accomplish this
 Using a single command on one switch only ensure that R8 instal ls two equal-cost route for the
following three path and you are not allowed to use any virtual name
vlan 411
int lo0 of SW4
int lo0 of R11
 Using a single command on one switch only ensure that R9 installs two equal cost route for the
following three path
vlan 310
int lo0 of SW3
int lo0 of R10
R8#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
101.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 101.1.34.0/30 is directly connected, Ethernet0/0
L 101.1.34.2/32 is directly connected, Ethernet0/0
123.0.0.0/8 is variably subnetted, 15 subnets, 2 masks
C 123.8.8.8/32 is directly connected, Loopback0
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 147
D 123.9.9.9/32 [90/409600] via 123.10.2.2, 00:04:37, Ethernet0/2
C 123.10.2.0/30 is directly connected, Ethernet0/2
L 123.10.2.1/32 is directly connected, Ethernet0/2
C 123.10.2.4/30 is directly connected, Ethernet0/1
L 123.10.2.5/32 is directly connected, Ethernet0/1
D 123.10.2.8/30 [90/307200] via 123.10.2.2, 00:04:37, Ethernet0/2
D 123.10.2.12/30 [90/307200] via 123.10.2.6, 00:04:37, Ethernet0/1
D 123.10.2.16/30 [90/281856] via 123.10.2.6, 00:04:27, Ethernet0/1
D 123.10.2.20/30 [90/307456] via 123.10.2.6, 00:04:37, Ethernet0/1
[90/307456] via 123.10.2.2, 00:04:37, Ethernet0/2
D 123.10.2.24/30 [90/307456] via 123.10.2.6, 00:00:25, Ethernet0/1
D 123.10.10.10/32 [90/409856] via 123.10.2.6, 00:04:27, Ethernet0/1
D 123.11.11.11/32 [90/435456] via 123.10.2.6, 00:00:11, Ethernet0/1
[90/435456] via 123.10.2.2, 00:00:11, Ethernet0/2
D 123.33.33.33/32 [90/409600] via 123.10.2.6, 00:04:27, Ethernet0/1
D 123.44.44.44/32 [90/435200] via 123.10.2.6, 00:04:37, Ethernet0/1
[90/435200] via 123.10.2.2, 00:04:37, Ethernet0/2
R9#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
33.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 33.34.4.0/30 is directly connected, Ethernet1/0
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 148
L 33.34.4.2/32 is directly connected, Ethernet1/0
102.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 102.1.34.0/30 is directly connected, Ethernet0/0
L 102.1.34.2/32 is directly connected, Ethernet0/0
123.0.0.0/8 is variably subnetted, 15 subnets, 2 masks
D 123.8.8.8/32 [90/409600] via 123.10.2.1, 00:04:36, Ethernet0/1
C 123.9.9.9/32 is directly connected, Loopback0
C 123.10.2.0/30 is directly connected, Ethernet0/1
L 123.10.2.2/32 is directly connected, Ethernet0/1
D 123.10.2.4/30 [90/307200] via 123.10.2.1, 00:04:36, Ethernet0/1
C 123.10.2.8/30 is directly connected, Ethernet0/2
L 123.10.2.9/32 is directly connected, Ethernet0/2
D 123.10.2.12/30 [90/307200] via 123.10.2.10, 00:04:46, Ethernet0/2
D 123.10.2.16/30 [90/307456] via 123.10.2.10, 00:04:36, Ethernet0/2
[90/307456] via 123.10.2.1, 00:04:36, Ethernet0/1
D 123.10.2.20/30 [90/281856] via 123.10.2.10, 00:04:47, Ethernet0/2
D 123.10.2.24/30 [90/307456] via 123.10.2.10, 00:00:34, Ethernet0/2
D 123.10.10.10/32 [90/435456] via 123.10.2.10, 00:04:36, Ethernet0/2
[90/435456] via 123.10.2.1, 00:04:36, Ethernet0/1
D 123.11.11.11/32 [90/409856] via 123.10.2.10, 00:00:20, Ethernet0/2
D 123.33.33.33/32 [90/435200] via 123.10.2.10, 00:04:36, Ethernet0/2
[90/435200] via 123.10.2.1, 00:04:36, Ethernet0/1
D 123.44.44.44/32 [90/409600] via 123.10.2.10, 00:04:47, Ethernet0/2
R9#
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 149
DIAGRAM:
R8 R9
R10 R11
SW3 SW4
ACME
NEW YORK
BGP AS 34567
123.10.2.X/30
101.1.34.2/30
E0/0
E0/1 .5
E0/1 .18
S38 .6
S310 .17
VLAN 38
VLAN 310
VLAN 34
S34 .13 S34 .14
VLAN 89
E0/2 .1 E0/1 .2
102.1.34.2/30
E0/0
VLAN 49
S49 .10
E0/2 .9
S411 .21
VLAN 411
E0/2 .22
VLAN 111
E0/2 .25 E0/1 .26
E0/0 .2
201.1.34.2/30
E0/0 .2
202.2.34.2/30
SOLUTIONS:
R8:
CCIERNSTRICKS.COM_H1.1_R8(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_R8(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_R8(config-router)#eigrp router-id 123.8.8.8
CCIERNSTRICKS.COM_H1.1_R8(config-router)#net 123.8.8.8 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R8(config-router)#net 123.10.2.1 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R8(config-router)#net 123.10.2.5 0.0.0.0
R9:
CCIERNSTRICKS.COM_H1.1_R9(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_R9(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_R9(config-router)#eigrp router-id 123.9.9.9
CCIERNSTRICKS.COM_H1.1_R9(config-router)#net 123.9.9.9 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R9(config-router)#net 123.10.2.2 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R9(config-router)#net 123.10.2.9 0.0.0.0
R10:
CCIERNSTRICKS.COM_H1.1_R10(config)#router eigrp 34567
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 150
CCIERNSTRICKS.COM_H1.1_R10(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_R10(config-router)#eigrp router-id 123.10.10.10
CCIERNSTRICKS.COM_H1.1_R10(config-router)#net 123.10.10.10 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R10(config-router)#net 123.10.2.18 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R10(config-router)#net 123.10.2.25 0.0.0.0
R11:
CCIERNSTRICKS.COM_H1.1_R11(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_R11(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_R11(config-router)#eigrp router-id 123.11.11.11
CCIERNSTRICKS.COM_H1.1_R12(config-router)#net 123.11.11.11 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R12(config-router)#net 123.10.2.22 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R12(config-router)#net 123.10.2.26 0.0.0.0
SW3:
CCIERNSTRICKS.COM_H1.1_SW3config)#ip routing
CCIERNSTRICKS.COM_H1.1_SW3(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#eigrp router-id 123.33.33.33
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.33.33.33 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.10.2.13 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.10.2.17 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.10.2.6 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW3(config-)#interface vlan 34
CCIERNSTRICKS.COM_H1.1_SW3(config-if)#delay 100
SW4:
CCIERNSTRICKS.COM_H1.1_SW4(config-)#ip routing
CCIERNSTRICKS.COM_H1.1_SW4(config)#router eigrp 34567
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#no auto
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#eigrp router-id 123.44.44.44
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.44.44.44 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.10.2.14 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.10.2.10 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.10.2.21 0.0.0.0
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 151
CCIERNSTRICKS.COM_H1.1_SW4(config-)#interface vlan 34
CCIERNSTRICKS.COM_H1.1_SW4(config-if)#delay 100
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 152
2.3 EIGRP in AS 45678
Configure EIGRP in AS 45678 as the following requirements
 The EIGRP autonomous system number is 45678
 The interface Loopback 0 at each router must be seen as an Internal EIGRP prefix by all other
routers
 Ensure the EIGRP is not running on any interface that is facing another AS use any method to
accomplish this requirement
 SW4 and SW6 are layer 3 switches must configure EIGRP
 On all three routers R15,16,17 must use EIGRP the 64bit metric version
 Do not change the interface bandwidth on any physical interface in as 45678
DIAGRAM:
R15
R16 R17
ACME
SYDENY
BGP AS 45678
123.20.1.X/30
E0/0
103.2.45.2/30
E0/1 .1 E0/2 .9
E0/1 .2 E0/2 .10
S55 .3 S66 .11
VLAN 55
VLAN 5
VLAN 66
E0/2 .17 E0/1 .18
E0/0
203.3.16.2/30
E0/0
203.3.17.2/30
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 153
SOLUTIONS:
R15:
CCIERNSTRICKS.COM_H1.1_R15(config)#router EIGRP CCIE
CCIERNSTRICKS.COM_H1.1_R15(config-router)#address-family ipv4 unicast autonomous-system 45678
CCIERNSTRICKS.COM_H1.1_R15(config-router-af)#network 123.15.15.15 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R15(config-router-af)#network 123.20.1.1 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R15(config-router-af)#network 123.20.1.9 0.0.0.0
R16:
CCIERNSTRICKS.COM_H1.1_R16(config)#router EIGRP CCIE
CCIERNSTRICKS.COM_H1.1_R16(config-router)#address-family ipv4 unicast autonomous-system 45678
CCIERNSTRICKS.COM_H1.1_R16(config-router-af)#network 123.16.16.16 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R16(config-router-af)#network 123.20.1.2 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R16(config-router-af)#network 123.20.1.17 0.0.0.0
R17:
CCIERNSTRICKS.COM_H1.1_R17(config)#router EIGRP CCIE
CCIERNSTRICKS.COM_H1.1_R17(config-router)#address-family ipv4 unicast autonomous-system 45678
CCIERNSTRICKS.COM_H1.1_R17(config-router-af)#network 123.17.17.17 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R17(config-router-af)#network 123.20.1.10 0.0.0.0
CCIERNSTRICKS.COM_H1.1_R17(config-router-af)#network 123.20.1.18 0.0.0.0
SW5:
CCIERNSTRICKS.COM_H1.1_SW5(config)#router EIGRP 45678
CCIERNSTRICKS.COM_H1.1_SW5(config-router)#network 123.20.1.3 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW5(config-router-)#network 123.55.55.55 0.0.0.0
IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE
INTERFACES SHOUTDOWN THEN MAKE THEM UP
CCIERNSTRICKS.COM_H1.1_SW5(config)#interface Vlan5
CCIERNSTRICKS.COM_H1.1_SW5(config-if)#no shutdown
CCIERNSTRICKS.COM_H1.1_SW5(config)#interface Vlan55
CCIERNSTRICKS.COM_H1.1_SW5(config-if)#no shutdown
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 154
SW6:
CCIERNSTRICKS.COM_H1.1_SW6(config)#router EIGRP 45678
CCIERNSTRICKS.COM_H1.1_SW6(config-router)#network 123.20.1.11 0.0.0.0
CCIERNSTRICKS.COM_H1.1_SW6(config-router)#network 123.66.66.66 0.0.0.0
IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE
INTERFACES SHOUTDOWN THEN MAKE THEM UP
CCIERNSTRICKS.COM_H1.1_SW6(config)#interface Vlan6
CCIERNSTRICKS.COM_H1.1_SW6(config-if)#no shutdown
CCIERNSTRICKS.COM_H1.1_SW6(config)#interface Vlan66
CCIERNSTRICKS.COM_H1.1_SW6(config-if)#no shutdown
© 2014-2018 CCIERNSTRICKS.COM July 29, 2018
© 2014-2018 CCIERNSTRICKS.COM 155
2.4 EIGRP in AS 65222
 The EIGRP autonomous system number is 45678
 The interface Loopback 0 at each router must be seen as an internal EIGRP prefix by all other
routers
 Ensure the EIGRP is not running on any interface that is facing another AS use any method to
accomplish this requirement
 R17 is the DMVPN hub, R18, R19 as the spoke use the preconfigured tunnel 0
DIAGRAM:
Regional SP-3
BGP 20003
R16 R17
R18 R9
ACME APAC
BGP AS 65222
S1/0
203.3.18.2/30
E0/0 E0/0
S1/0
203.3.19.2/30
E0/2 .17 E0/1 .18
E0/0
203.3.16.2/30
E0/0
203.3.17.2/30
10.1.18.1/24 10.1.19.1/24
SOLUTIONS:
NOTE:MOST OF THE PART OF THIS QUESTION WILL BE UP AND RUNNING AFTER BGP AND DMVPN
CONFIGURATION. THIS TASK IS DEPENDANT TASK 2.7, 2.7 and 3.1, 3.2, 3.3 ONCES THOSE TASK DONE
CONFIG WILL WORK
R17:
CCIERNSTRICKS.COM_H1.1_R17(config)#router EIGRP CCIE
CCIERNSTRICKS.COM_H1.1_R17(config-router)#address-family ipv4 unicast autonomous-system 45678
CCIERNSTRICKS.COM_H1.2_R17 (config-router-af)#af-interface tun0
CCIERNSTRICKS.COM_H1.2_R17 (config-router-af-interface)# next-hop-self
CCIERNSTRICKS.COM_H1.2_R17 (config-router-af-interface)# split-horizon

Mais conteúdo relacionado

Mais procurados

Configure ospf v3 single areaa
Configure ospf v3 single areaaConfigure ospf v3 single areaa
Configure ospf v3 single areaajebong03
 
Cisco 2960 basic configuration – vlan configuration
Cisco 2960 basic configuration – vlan configurationCisco 2960 basic configuration – vlan configuration
Cisco 2960 basic configuration – vlan configuration3Anetwork com
 
Twin wheeler modified for arduino simplified serial protocol to sabertooth v2
Twin wheeler modified for arduino simplified serial protocol to sabertooth v2Twin wheeler modified for arduino simplified serial protocol to sabertooth v2
Twin wheeler modified for arduino simplified serial protocol to sabertooth v2josnihmurni2907
 
Ccna 4 final lab switchi
Ccna 4 final lab switchiCcna 4 final lab switchi
Ccna 4 final lab switchiLeandro Uglar
 
Cisco commands List for Beginners (CCNA, CCNP)
Cisco commands List for Beginners (CCNA, CCNP)Cisco commands List for Beginners (CCNA, CCNP)
Cisco commands List for Beginners (CCNA, CCNP)DH Da Lat
 
Multi Conveyor Upgrade Manual
Multi  Conveyor Upgrade ManualMulti  Conveyor Upgrade Manual
Multi Conveyor Upgrade ManualNeil Kane
 
2.2.4.9 packet tracer configuring switch port security instructions - ig
2.2.4.9 packet tracer   configuring switch port security instructions - ig2.2.4.9 packet tracer   configuring switch port security instructions - ig
2.2.4.9 packet tracer configuring switch port security instructions - igAlex Ramirez
 
4 Channel Relay Board 12V-Compatible for Arduino
4 Channel Relay Board 12V-Compatible for Arduino4 Channel Relay Board 12V-Compatible for Arduino
4 Channel Relay Board 12V-Compatible for ArduinoRaghav Shetty
 
Ccna 1 chapter 11 v4.0 answers 2011
Ccna 1 chapter 11 v4.0 answers 2011Ccna 1 chapter 11 v4.0 answers 2011
Ccna 1 chapter 11 v4.0 answers 2011Dân Chơi
 
Lab 9 instructions
Lab 9 instructionsLab 9 instructions
Lab 9 instructionstrayyoo
 
Configuring the cisco switch with the cli based setup program
Configuring the cisco switch with the cli based setup programConfiguring the cisco switch with the cli based setup program
Configuring the cisco switch with the cli based setup program3Anetwork com
 
Important cisco-chow-commands
Important cisco-chow-commandsImportant cisco-chow-commands
Important cisco-chow-commandsssusere31b5c
 

Mais procurados (17)

Configuracao de switch
Configuracao de switchConfiguracao de switch
Configuracao de switch
 
Storm-Control
Storm-ControlStorm-Control
Storm-Control
 
Configure ospf v3 single areaa
Configure ospf v3 single areaaConfigure ospf v3 single areaa
Configure ospf v3 single areaa
 
Cisco 2960 basic configuration – vlan configuration
Cisco 2960 basic configuration – vlan configurationCisco 2960 basic configuration – vlan configuration
Cisco 2960 basic configuration – vlan configuration
 
Rack
RackRack
Rack
 
Twin wheeler modified for arduino simplified serial protocol to sabertooth v2
Twin wheeler modified for arduino simplified serial protocol to sabertooth v2Twin wheeler modified for arduino simplified serial protocol to sabertooth v2
Twin wheeler modified for arduino simplified serial protocol to sabertooth v2
 
Ccna 4 final lab switchi
Ccna 4 final lab switchiCcna 4 final lab switchi
Ccna 4 final lab switchi
 
Cisco commands List for Beginners (CCNA, CCNP)
Cisco commands List for Beginners (CCNA, CCNP)Cisco commands List for Beginners (CCNA, CCNP)
Cisco commands List for Beginners (CCNA, CCNP)
 
Multi Conveyor Upgrade Manual
Multi  Conveyor Upgrade ManualMulti  Conveyor Upgrade Manual
Multi Conveyor Upgrade Manual
 
2.2.4.9 packet tracer configuring switch port security instructions - ig
2.2.4.9 packet tracer   configuring switch port security instructions - ig2.2.4.9 packet tracer   configuring switch port security instructions - ig
2.2.4.9 packet tracer configuring switch port security instructions - ig
 
4 Channel Relay Board 12V-Compatible for Arduino
4 Channel Relay Board 12V-Compatible for Arduino4 Channel Relay Board 12V-Compatible for Arduino
4 Channel Relay Board 12V-Compatible for Arduino
 
NFS2-3030
NFS2-3030NFS2-3030
NFS2-3030
 
Ccna 1 chapter 11 v4.0 answers 2011
Ccna 1 chapter 11 v4.0 answers 2011Ccna 1 chapter 11 v4.0 answers 2011
Ccna 1 chapter 11 v4.0 answers 2011
 
Lab 9 instructions
Lab 9 instructionsLab 9 instructions
Lab 9 instructions
 
Configuring the cisco switch with the cli based setup program
Configuring the cisco switch with the cli based setup programConfiguring the cisco switch with the cli based setup program
Configuring the cisco switch with the cli based setup program
 
Networks & Internet
Networks & InternetNetworks & Internet
Networks & Internet
 
Important cisco-chow-commands
Important cisco-chow-commandsImportant cisco-chow-commands
Important cisco-chow-commands
 

Semelhante a CCIE R&S Real Lab H2 Config

CCN3Switching_lab_5_5_2
CCN3Switching_lab_5_5_2CCN3Switching_lab_5_5_2
CCN3Switching_lab_5_5_2alan moreno
 
The bryant advantage 150 commands
The bryant advantage 150 commandsThe bryant advantage 150 commands
The bryant advantage 150 commandsAreej Khasawneh
 
Exercise 4c stp rapid pvst+ question
Exercise 4c   stp rapid pvst+ questionExercise 4c   stp rapid pvst+ question
Exercise 4c stp rapid pvst+ questionsufi1248
 
Vlan lab
Vlan labVlan lab
Vlan labtmim8
 
Free CCNP switching workbook by networkershome pdf
Free CCNP switching workbook by networkershome pdfFree CCNP switching workbook by networkershome pdf
Free CCNP switching workbook by networkershome pdfNetworkershome
 
Packet Tracer Simulation Lab Layer 2 Switching
Packet Tracer Simulation Lab Layer 2 SwitchingPacket Tracer Simulation Lab Layer 2 Switching
Packet Tracer Simulation Lab Layer 2 SwitchingJohnson Liu
 
ACIT - CCNA Training Course Topic - Switch Stp ACIT
ACIT - CCNA Training Course Topic - Switch Stp ACITACIT - CCNA Training Course Topic - Switch Stp ACIT
ACIT - CCNA Training Course Topic - Switch Stp ACITSleek International
 
Packettracersimulationlabl3routing 130306235157-phpapp02
Packettracersimulationlabl3routing 130306235157-phpapp02Packettracersimulationlabl3routing 130306235157-phpapp02
Packettracersimulationlabl3routing 130306235157-phpapp02A.S.M Shmimul Islam.
 
How to configure cisco 6500 vss
How to configure cisco 6500 vssHow to configure cisco 6500 vss
How to configure cisco 6500 vssIT Tech
 
2.3.1.5 packet tracer configuring rapid pvst+ answer
2.3.1.5 packet tracer   configuring rapid pvst+ answer2.3.1.5 packet tracer   configuring rapid pvst+ answer
2.3.1.5 packet tracer configuring rapid pvst+ answerNarayana Samy
 
Cisco data center support
Cisco data center supportCisco data center support
Cisco data center supportKrunal Shah
 
Lab 6.4.1 InterVLAN routing
Lab 6.4.1 InterVLAN routingLab 6.4.1 InterVLAN routing
Lab 6.4.1 InterVLAN routingMuhd Mu'izuddin
 
Virtual LAN and Vlan Trunking Protocol.pptx
Virtual LAN and Vlan Trunking Protocol.pptxVirtual LAN and Vlan Trunking Protocol.pptx
Virtual LAN and Vlan Trunking Protocol.pptxmarunkumareee77
 
Hướng dẫn cài đặt switch planet layer 3
Hướng dẫn cài đặt switch planet layer 3Hướng dẫn cài đặt switch planet layer 3
Hướng dẫn cài đặt switch planet layer 33c telecom
 
VXLAN BGP EVPN: Technology Building Blocks
VXLAN BGP EVPN: Technology Building BlocksVXLAN BGP EVPN: Technology Building Blocks
VXLAN BGP EVPN: Technology Building BlocksAPNIC
 

Semelhante a CCIE R&S Real Lab H2 Config (20)

CCN3Switching_lab_5_5_2
CCN3Switching_lab_5_5_2CCN3Switching_lab_5_5_2
CCN3Switching_lab_5_5_2
 
The bryant advantage 150 commands
The bryant advantage 150 commandsThe bryant advantage 150 commands
The bryant advantage 150 commands
 
Exercise 4c stp rapid pvst+ question
Exercise 4c   stp rapid pvst+ questionExercise 4c   stp rapid pvst+ question
Exercise 4c stp rapid pvst+ question
 
Vlan lab
Vlan labVlan lab
Vlan lab
 
Icnd210 s02l01
Icnd210 s02l01Icnd210 s02l01
Icnd210 s02l01
 
Free CCNP switching workbook by networkershome pdf
Free CCNP switching workbook by networkershome pdfFree CCNP switching workbook by networkershome pdf
Free CCNP switching workbook by networkershome pdf
 
Packet Tracer Simulation Lab Layer 2 Switching
Packet Tracer Simulation Lab Layer 2 SwitchingPacket Tracer Simulation Lab Layer 2 Switching
Packet Tracer Simulation Lab Layer 2 Switching
 
ACIT - CCNA Training Course Topic - Switch Stp ACIT
ACIT - CCNA Training Course Topic - Switch Stp ACITACIT - CCNA Training Course Topic - Switch Stp ACIT
ACIT - CCNA Training Course Topic - Switch Stp ACIT
 
Lab6.4.1
Lab6.4.1Lab6.4.1
Lab6.4.1
 
Packettracersimulationlabl3routing 130306235157-phpapp02
Packettracersimulationlabl3routing 130306235157-phpapp02Packettracersimulationlabl3routing 130306235157-phpapp02
Packettracersimulationlabl3routing 130306235157-phpapp02
 
Day 14.2 configuringvla ns
Day 14.2 configuringvla nsDay 14.2 configuringvla ns
Day 14.2 configuringvla ns
 
How to configure cisco 6500 vss
How to configure cisco 6500 vssHow to configure cisco 6500 vss
How to configure cisco 6500 vss
 
Aruba mobility access switch useful commands v2
Aruba mobility access switch useful commands v2Aruba mobility access switch useful commands v2
Aruba mobility access switch useful commands v2
 
2.3.1.5 packet tracer configuring rapid pvst+ answer
2.3.1.5 packet tracer   configuring rapid pvst+ answer2.3.1.5 packet tracer   configuring rapid pvst+ answer
2.3.1.5 packet tracer configuring rapid pvst+ answer
 
Cisco data center support
Cisco data center supportCisco data center support
Cisco data center support
 
Lab 6.4.1 InterVLAN routing
Lab 6.4.1 InterVLAN routingLab 6.4.1 InterVLAN routing
Lab 6.4.1 InterVLAN routing
 
Virtual LAN and Vlan Trunking Protocol.pptx
Virtual LAN and Vlan Trunking Protocol.pptxVirtual LAN and Vlan Trunking Protocol.pptx
Virtual LAN and Vlan Trunking Protocol.pptx
 
Tema3
Tema3Tema3
Tema3
 
Hướng dẫn cài đặt switch planet layer 3
Hướng dẫn cài đặt switch planet layer 3Hướng dẫn cài đặt switch planet layer 3
Hướng dẫn cài đặt switch planet layer 3
 
VXLAN BGP EVPN: Technology Building Blocks
VXLAN BGP EVPN: Technology Building BlocksVXLAN BGP EVPN: Technology Building Blocks
VXLAN BGP EVPN: Technology Building Blocks
 

Último

Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!Commit University
 
Training state-of-the-art general text embedding
Training state-of-the-art general text embeddingTraining state-of-the-art general text embedding
Training state-of-the-art general text embeddingZilliz
 
"Debugging python applications inside k8s environment", Andrii Soldatenko
"Debugging python applications inside k8s environment", Andrii Soldatenko"Debugging python applications inside k8s environment", Andrii Soldatenko
"Debugging python applications inside k8s environment", Andrii SoldatenkoFwdays
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024Lonnie McRorey
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr BaganFwdays
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
Advanced Computer Architecture – An Introduction
Advanced Computer Architecture – An IntroductionAdvanced Computer Architecture – An Introduction
Advanced Computer Architecture – An IntroductionDilum Bandara
 
What is Artificial Intelligence?????????
What is Artificial Intelligence?????????What is Artificial Intelligence?????????
What is Artificial Intelligence?????????blackmambaettijean
 
Anypoint Exchange: It’s Not Just a Repo!
Anypoint Exchange: It’s Not Just a Repo!Anypoint Exchange: It’s Not Just a Repo!
Anypoint Exchange: It’s Not Just a Repo!Manik S Magar
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024Lorenzo Miniero
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brandgvaughan
 
Rise of the Machines: Known As Drones...
Rise of the Machines: Known As Drones...Rise of the Machines: Known As Drones...
Rise of the Machines: Known As Drones...Rick Flair
 
DevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platformsDevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platformsSergiu Bodiu
 
Transcript: New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024Transcript: New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024BookNet Canada
 
Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 365Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 3652toLead Limited
 
From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .Alan Dix
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.Curtis Poe
 
unit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptxunit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptxBkGupta21
 
The Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and ConsThe Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and ConsPixlogix Infotech
 

Último (20)

Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!Nell’iperspazio con Rocket: il Framework Web di Rust!
Nell’iperspazio con Rocket: il Framework Web di Rust!
 
Training state-of-the-art general text embedding
Training state-of-the-art general text embeddingTraining state-of-the-art general text embedding
Training state-of-the-art general text embedding
 
"Debugging python applications inside k8s environment", Andrii Soldatenko
"Debugging python applications inside k8s environment", Andrii Soldatenko"Debugging python applications inside k8s environment", Andrii Soldatenko
"Debugging python applications inside k8s environment", Andrii Soldatenko
 
TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024TeamStation AI System Report LATAM IT Salaries 2024
TeamStation AI System Report LATAM IT Salaries 2024
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan"ML in Production",Oleksandr Bagan
"ML in Production",Oleksandr Bagan
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
Advanced Computer Architecture – An Introduction
Advanced Computer Architecture – An IntroductionAdvanced Computer Architecture – An Introduction
Advanced Computer Architecture – An Introduction
 
What is Artificial Intelligence?????????
What is Artificial Intelligence?????????What is Artificial Intelligence?????????
What is Artificial Intelligence?????????
 
Anypoint Exchange: It’s Not Just a Repo!
Anypoint Exchange: It’s Not Just a Repo!Anypoint Exchange: It’s Not Just a Repo!
Anypoint Exchange: It’s Not Just a Repo!
 
SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024SIP trunking in Janus @ Kamailio World 2024
SIP trunking in Janus @ Kamailio World 2024
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brand
 
Rise of the Machines: Known As Drones...
Rise of the Machines: Known As Drones...Rise of the Machines: Known As Drones...
Rise of the Machines: Known As Drones...
 
DevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platformsDevEX - reference for building teams, processes, and platforms
DevEX - reference for building teams, processes, and platforms
 
Transcript: New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024Transcript: New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: Loan Stars - Tech Forum 2024
 
Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 365Ensuring Technical Readiness For Copilot in Microsoft 365
Ensuring Technical Readiness For Copilot in Microsoft 365
 
From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .From Family Reminiscence to Scholarly Archive .
From Family Reminiscence to Scholarly Archive .
 
How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.
 
unit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptxunit 4 immunoblotting technique complete.pptx
unit 4 immunoblotting technique complete.pptx
 
The Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and ConsThe Ultimate Guide to Choosing WordPress Pros and Cons
The Ultimate Guide to Choosing WordPress Pros and Cons
 

CCIE R&S Real Lab H2 Config

  • 1. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 127 1.1 SWITCH ADMINISTRATION Configure the ACME headquarters network (AS 12345) as per the following requirements  The VTP domain must be set to CCIE  Use VTP version 2  SW1 must be the VTP server and SW2 must be the VTP client  Secure all VTP update with an MD5 digest of the ASCII string CCIErock$  In order to avoid as much as possible unknown unicast flooding in all VLANs the administrator requires that any dynamic entries learned by either SW1 to SW2 must be retained for 2 hours before being refresh, Configure the network of the new York office (AS 34567) as per the following requirements  The VTP domain must be set to CCIE  Use VTP version 2  SW3 and SW4 must no advertise their VLAN configuration but must forward VTP advertisement that they receive out their trunk ports  Secure all VTP update with an MD5 digest of the ASCII string CCIErock? DIAGRAM: Internet SP BGP 30000R20 R2 R3 R4 R5 R1 R7R6 SW1 SW2 R8 R9 R10 R11 SW3 SW4 ACME HQ SAN FRANCISCO BGP AS 12345 123.10.1.X/30 ACME NEW YORK BGP AS 34567 123.10.2.X/30 ACME SAN JOSE BGP AS 65112 101.1.123.2/30 5x VPN E0/0 102.2.123.2/30 5x VPN E0/0 E0/3 .1 E0/1 .9 E0/1 .10 E0/2 .17 E0/0 .2 E0/1 .18 VLAN 23 VLAN 24 E0/3.5E0/1 .6 5x VPN 5x VPN E0/0 .2 E0/2 .13 E0/2 .14 VLAN 35 E0/1 .1 E0/2 .5 E0/1 .6VLAN 14 VLAN 15 VLAN 67 E0/2 .21 E0/2 .22 VLAN 46 VLAN 57 E0/0 .29 E0/2 .30 E0/1 .25 E0/1 .26 E0/0 .2 3x VPN 201.1.123.2/30 E0/0 .2 3x VPN 202.2.123.2/30 101.1.34.2/30 E0/0 E0/1 .5 E0/1 .18 S38 .6 S310 .17 VLAN 38 VLAN 310 VLAN 34 S34 .13 S34 .14 VLAN 89 E0/2 .1 E0/1 .2 102.1.34.2/30 E0/0 VLAN 49 S49 .10 E0/2 .9 S411 .21 VLAN 411 E0/2 .22 VLAN 111 E0/2 .25 E0/1 .26 E0/0 .2 201.1.34.2/30 E0/0 .2 202.2.34.2/30 33.34.4.2/30 E1/0 33.34.3.2/30 E1/0 10.2.19.1/24 SOLUTION: SW1: CCIERNSTRICKS.COM_H1.1_SW1(config)# CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP domain CCIE
  • 2. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 128 CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP mode server CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP version 2 CCIERNSTRICKS.COM_H1.1_SW1(config)#VTP password CCIErock? TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER CCIERNSTRICKS.COM_H1.1_SW1(config)#Mac-address again 7200 SW2: CCIERNSTRICKS.COM_H1.1_SW2(config)#VTP domain CCIE CCIERNSTRICKS.COM_H1.1_SW2(config)#VTP mode client CCIERNSTRICKS.COM_H1.1_SW2(config)#VTP password CCIErock? TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER CCIERNSTRICKS.COM_H1.1_SW2(config)#Mac-address again 7200 SW3 CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP domain CCIE CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP version 2 CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP mode transparent CCIERNSTRICKS.COM_H1.1_SW3(config)#VTP password CCIErock$ TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER SW4: CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP domain CCIE CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP version 2 CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP mode transparent CCIERNSTRICKS.COM_H1.1_SW4(config)#VTP password CCIErock$ TO GET THE QUESTION MARK ENTERD, TYPE CTRL + V, AND THE ENTER THE ? CHARACTER
  • 3. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 129 1.2 LAYER 2 PORTS Configure your network as per the following requirements Complete the configuration of all VLANs so that all routers those are located in ACME's Headquarters (AS12345) and New York office (AS 34567) can ping their directly connected neighbors  All four switches (SW1-SW4) must have dot1q trunks that do not rely on negotiation do not configure any etherchannel  Ensure that the following unused ports on all four switches are shutdown and  Configured as access ports in VLAN 999 E3/0 - E3/3 are unused on SW1 and SW2 E1/0 - E1/3 are unused on SW3 and SW4 E3/0 - E3/3 are unused on SW3 and SW4 DIAGRAM: Internet SP BGP 30000R20 R2 R3 R4 R5 R1 R7R6 SW1 SW2 R8 R9 R10 R11 SW3 SW4 ACME HQ SAN FRANCISCO BGP AS 12345 123.10.1.X/30 ACME NEW YORK BGP AS 34567 123.10.2.X/30 ACME SAN JOSE BGP AS 65112 101.1.123.2/30 5x VPN E0/0 102.2.123.2/30 5x VPN E0/0 E0/3 .1 E0/1 .9 E0/1 .10 E0/2 .17 E0/0 .2 E0/1 .18 VLAN 23 VLAN 24 E0/3.5E0/1 .6 5x VPN 5x VPN E0/0 .2 E0/2 .13 E0/2 .14 VLAN 35 E0/1 .1 E0/2 .5 E0/1 .6VLAN 14 VLAN 15 VLAN 67 E0/2 .21 E0/2 .22 VLAN 46 VLAN 57 E0/0 .29 E0/2 .30 E0/1 .25 E0/1 .26 E0/0 .2 3x VPN 201.1.123.2/30 E0/0 .2 3x VPN 202.2.123.2/30 101.1.34.2/30 E0/0 E0/1 .5 E0/1 .18 S38 .6 S310 .17 VLAN 38 VLAN 310 VLAN 34 S34 .13 S34 .14 VLAN 89 E0/2 .1 E0/1 .2 102.1.34.2/30 E0/0 VLAN 49 S49 .10 E0/2 .9 S411 .21 VLAN 411 E0/2 .22 VLAN 111 E0/2 .25 E0/1 .26 E0/0 .2 201.1.34.2/30 E0/0 .2 202.2.34.2/30 33.34.4.2/30 E1/0 33.34.3.2/30 E1/0 10.2.19.1/24 SOLUTION: SW1: CCIERNSTRICKS.COM_H1.1_SW1(config)#Vlan 14,15,23,24,35,46,57,67,999 TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING VLAN ACCORDINGLY. CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/0 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
  • 4. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 130 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 14 CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/1 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 23 CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/2 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 23 CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/3 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 24 CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/0 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 14 CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/1 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 15 CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/2 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 67 CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/3 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 67 CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/0 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/1 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/2 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access
  • 5. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 131 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/3 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW1(config)#Interface range eth 2/0-3 CCIERNSTRICKS.COM_H1.1_SW1(config)#switchport trunk encapsulation dot1q CCIERNSTRICKS.COM_H1.1_SW1(config)#switchport mode trunk CCIERNSTRICKS.COM_H1.1_SW1(config)#switchport nonegotiate SW2: TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING VLAN ACCORDINGLY. CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/0 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 15 CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/1 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 24 CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/2 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 35 CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth0/3 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 46 CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/0 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 57 CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/1 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 35
  • 6. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 132 CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/2 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 46 CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth1/3 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 57 CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/0 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/1 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/2 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW2(config)#interface eth3/3 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW2(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW2(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW2(config)#Interface range eth 2/0-3 CCIERNSTRICKS.COM_H1.1_SW2(config)#switchport trunk encapsulation dot1q CCIERNSTRICKS.COM_H1.1_SW2(config)#switchport mode trunk CCIERNSTRICKS.COM_H1.1_SW2(config)#switchport nonegotiate SW3: CCIERNSTRICKS.COM_H1.1_SW3(config)#Vlan 34,38,49,89,111,310,411,999 TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING VLAN ACCORDINGLY. CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth0/0 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access
  • 7. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 133 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 38 CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth0/1 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 89 CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth0/2 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 310 CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth0/3 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 111 CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth1/0 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth1/1 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth1/2 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth1/3 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/0 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/1 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999
  • 8. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 134 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/2 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface eth3/3 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW3(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW3(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#Interface range eth 2/0-3 CCIERNSTRICKS.COM_H1.1_SW3(config)#switchport trunk encapsulation dot1q CCIERNSTRICKS.COM_H1.1_SW3(config)#switchport mode trunk CCIERNSTRICKS.COM_H1.1_SW3(config)#switchport nonegotiate IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE INTERFACES SHOUTDOWN THEN MAKE THEM UP CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan34 CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan38 CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan310 CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown SW4: CCIERNSTRICKS.COM_H1.1_SW4(config)#Vlan 34,38,49,89,111,310,411,999 TO KNOW THE SWITCH PORT DETAILS OF DEVICES USE show cdp neighbors COMMAND AND ASSING VLAN ACCORDINGLY. CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/0 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 89 CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/1 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 49
  • 9. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 135 CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/2 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 111 CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth0/3 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 411 CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/0 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/1 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/2 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth1/3 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth3/0 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW1(config)#interface eth3/1 CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW1(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth3/2 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999
  • 10. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 136 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW4(config)#interface eth3/3 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport mode access CCIERNSTRICKS.COM_H1.1_SW4(config-if)# switchport access vlan 999 CCIERNSTRICKS.COM_H1.1_SW4(config-if)# shutdown CCIERNSTRICKS.COM_H1.1_SW4(config)#Interface range eth 2/0-3 CCIERNSTRICKS.COM_H1.1_SW4(config)#switchport trunk encapsulation dot1q CCIERNSTRICKS.COM_H1.1_SW4(config)#switchport mode trunk CCIERNSTRICKS.COM_H1.1_SW4(config)#switchport nonegotiate IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE INTERFACES SHOUTDOWN THEN MAKE THEM UP CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan34 CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan49 CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown CCIERNSTRICKS.COM_H1.1_SW3(config)#interface Vlan411 CCIERNSTRICKS.COM_H1.1_SW3(config-if)#no shutdown AFTER CONFIGURATION OF ALL ABOVE TASK PLEASE MAKE SURE THAT ALL DEVICES IN AS 12345 AND AS 34567 ARE ABLE TO PING ITS DIRECTLY CONNECTED NEIGHBORS
  • 11. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 137 1.3 SPANNING TREE Configure the ACME network as per the following requirements.  SW1 must be the root switch for all odd vlans and must be the backup for all even vlans  SW2 must be the root switch for all even vlans and must be the backup for all odd vlans  SW3 must be the root switch for all odd vlans and must be the backup for all even vlans  SW4 must be the root switch for all even vlans and must be the backup for all odd vlans  Explicitly configure the root and backup roles, assuming that other switches with default configuration may eventually be added in the network in the future  All switches must maintain one STP instance per vlan  Use the STP mode that has only three possible states  All access ports must immediately transitioned to the forwarding state upon link up and they must still participate in STP. Use single command per switch to enable this  Access ports must automatically shut down if they receive any BPDU and an administrator must still manually re-enable the port. Use a single command per switch to enable this feature. DIAGRAM: Internet SP BGP 30000R20 R2 R3 R4 R5 R1 R7R6 SW1 SW2 R8 R9 R10 R11 SW3 SW4 ACME HQ SAN FRANCISCO BGP AS 12345 123.10.1.X/30 ACME NEW YORK BGP AS 34567 123.10.2.X/30 ACME SAN JOSE BGP AS 65112 101.1.123.2/30 5x VPN E0/0 102.2.123.2/30 5x VPN E0/0 E0/3 .1 E0/1 .9 E0/1 .10 E0/2 .17 E0/0 .2 E0/1 .18 VLAN 23 VLAN 24 E0/3.5E0/1 .6 5x VPN 5x VPN E0/0 .2 E0/2 .13 E0/2 .14 VLAN 35 E0/1 .1 E0/2 .5 E0/1 .6VLAN 14 VLAN 15 VLAN 67 E0/2 .21 E0/2 .22 VLAN 46 VLAN 57 E0/0 .29 E0/2 .30 E0/1 .25 E0/1 .26 E0/0 .2 3x VPN 201.1.123.2/30 E0/0 .2 3x VPN 202.2.123.2/30 101.1.34.2/30 E0/0 E0/1 .5 E0/1 .18 S38 .6 S310 .17 VLAN 38 VLAN 310 VLAN 34 S34 .13 S34 .14 VLAN 89 E0/2 .1 E0/1 .2 102.1.34.2/30 E0/0 VLAN 49 S49 .10 E0/2 .9 S411 .21 VLAN 411 E0/2 .22 VLAN 111 E0/2 .25 E0/1 .26 E0/0 .2 201.1.34.2/30 E0/0 .2 202.2.34.2/30 33.34.4.2/30 E1/0 33.34.3.2/30 E1/0 10.2.19.1/24 SOLUTIONS: SW1: CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree mode rapid-pvst CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree portfast default CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree portfast bpduguard default CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree vlan 1,15,23,35,57,67,999 priority 0 CCIERNSTRICKS.COM_H1.1_SW1(config)#Spanning-tree vlan 14,24,46 priority 4096
  • 12. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 138 SW2: CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree mode rapid-pvst CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree portfast default CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree portfast bpduguard default CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree vlan 1,15,23,35,57,67,999 priority 4096 CCIERNSTRICKS.COM_H1.1_SW2(config)#Spanning-tree vlan 14,24,46 priority 0 SW3: CCIERNSTRICKS.COM_H1.1_SW3(config)#Spanning-tree mode rapid-pvst CCIERNSTRICKS.COM_H1.1_SW3(config)#Spanning-tree portfast default CCIERNSTRICKS.COM_H1.1_SW3(config)#Spanning-tree portfast bpduguard default CCIERNSTRICKS.COM_H1.1_SW3(config)#spanning-tree vlan 1,49,89,111,411,999 priority 0 CCIERNSTRICKS.COM_H1.1_SW3(config)#spanning-tree vlan 34,38,310 priority 4096 SW4: CCIERNSTRICKS.COM_H1.1_SW4(config)#Spanning-tree mode rapid-pvst CCIERNSTRICKS.COM_H1.1_SW4(config)#Spanning-tree portfast default CCIERNSTRICKS.COM_H1.1_SW4(config)#Spanning-tree portfast bpduguard default CCIERNSTRICKS.COM_H1.1_SW4(config)#spanning-tree vlan 1,49,89,111,411,999 priority 4096 CCIERNSTRICKS.COM_H1.1_SW4(config)#spanning-tree vlan 34,38,310 priority 0
  • 13. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 139 1.4 WAN SWITCHING The WAN links must rely on a layer 2 protocol that supports link negotiation and authentication.  The Service provider expects both R18 and R19 to complete three way hand shake by providing the expected response of a challenge that is sent by AS 20003 Router  R18 must use the username ACME-R18 and password CCIE  R19 must use the username ACME-R19 and password CCIE DIAGRAM: SOLUTIONS: R18: CCIERNSTRICKS.COM_H1.1_R18(config)#int s1/0 CCIERNSTRICKS.COM_H1.1_R18(config)# no shutdown CCIERNSTRICKS.COM_H1.1_R18(config-if)#encap ppp CCIERNSTRICKS.COM_H1.1_R18(config-if)#no peer neighbor-route CCIERNSTRICKS.COM_H1.1_R18(config-if)#ppp chap hostname ACME-R18 CCIERNSTRICKS.COM_H1.1_R18(config-if)#ppp chap password CCIE R19: CCIERNSTRICKS.COM_H1.1_R19(config)#int s1/0 CCIERNSTRICKS.COM_H1.1_R19(config)# no shutdown
  • 14. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 140 CCIERNSTRICKS.COM_H1.1_R19(config-if)#encap ppp CCIERNSTRICKS.COM_H1.1_R19(config-if)#no peer neighbor-route CCIERNSTRICKS.COM_H1.1_R19(config-if)#ppp chap hostname ACME-R19 CCIERNSTRICKS.COM_H1.1_R19(config-if)#ppp chap password CCIE
  • 15. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 141 SECTION II LAYER 3 TECHNOLOGIES
  • 16. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 142 2.1 OSPF IN AS12345 Configure OSPFv2 area 0 in ACME HQ (AS12345) according to the following requirements:  Configure the OSPF process id to 12345 and set the router id to interface lo0 on all seven routers  The interface lo0 at each router must be seen as an internal OSPF prefix by all other routers  Ensure that OSPF is not running on any interface that is facing another AS. use any method to accomplish this requirement  SW1 and SW2 must not participate in routing at all  Do not change the default OSPF cost of any interface in AS12345  Ensure that R1 must see OSPF routes in routing table as STUB, it is not order you configure R1 in STUB area, just make sure R1 won't be a Transit router of Traffics R1 is not Source or Destination  R1 must see the following OSPF routes in the routing table R1#sh ip route OSPF Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP + - replicated route, % - next hop override Gateway of last resort is not set 123.0.0.0/8 is variably subnetted, 17 subnets, 2 masks O 123.2.2.2/32 [110/65546] via 123.10.1.2, 00:03:57, Ethernet0/1 O 123.3.3.3/32 [110/65546] via 123.10.1.6, 00:03:31, Ethernet0/2 O 123.4.4.4/32 [110/65536] via 123.10.1.2, 00:04:07, Ethernet0/1 O 123.5.5.5/32 [110/65536] via 123.10.1.6, 00:03:31, Ethernet0/2 O 123.6.6.6/32 [110/65546] via 123.10.1.2, 00:03:04, Ethernet0/1 O 123.7.7.7/32 [110/65546] via 123.10.1.6, 00:02:36, Ethernet0/2 O 123.10.1.8/30 [110/65555] via 123.10.1.6, 00:03:31, Ethernet0/2 [110/65555] via 123.10.1.2, 00:03:57, Ethernet0/1 O 123.10.1.12/30 [110/65545] via 123.10.1.6, 00:03:31, Ethernet0/2 O 123.10.1.16/30 [110/65545] via 123.10.1.2, 00:04:07, Ethernet0/1
  • 17. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 143 O 123.10.1.20/30 [110/65545] via 123.10.1.2, 00:03:57, Ethernet0/1 O 123.10.1.24/30 [110/65555] via 123.10.1.6, 00:02:36, Ethernet0/2 [110/65555] via 123.10.1.2, 00:01:56, Ethernet0/1 O 123.10.1.28/30 [110/65545] via 123.10.1.6, 00:03:31, Ethernet0/2 R1# DIAGRAM: R2 R3 R4 R5 R1 R7R6 SW1 SW2 ACME HQ SAN FRANCISCO BGP AS 12345 123.10.1.X/30 101.1.123.2/30 5x VPN E0/0 102.2.123.2/30 5x VPN E0/0 E0/3 .1 E0/1 .9 E0/1 .10 E0/2 .17 E0/0 .2 E0/1 .18 VLAN 23 VLAN 24 E0/3.5 E0/2 .13 E0/2 .14 VLAN 35 E0/1 .1 E0/2 .5 E0/1 .6VLAN 14 VLAN 15 VLAN 67 E0/2 .21 E0/2 .22 VLAN 46 VLAN 57 E0/0 .29 E0/2 .30 E0/1 .25 E0/1 .26 E0/0 .2 3x VPN 201.1.123.2/30 E0/0 .2 3x VPN 202.2.123.2/30 SOLUTIONS:
  • 18. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 144 R1: CCIERNSTRICKS.COM_H1.1_R1(config)#router ospf 12345 CCIERNSTRICKS.COM_H1.1_R1(config-router)#router-id 123.1.1.1 CCIERNSTRICKS.COM_H1.1_R1(config-router)#network 123.1.1.1 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R1(config-router)#network 123.10.1.5 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R1(config-router)#network 123.10.1.1 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R1(config-router)#max-metric router-lsa R2: CCIERNSTRICKS.COM_H1.1_R2(config)#router ospf 12345 CCIERNSTRICKS.COM_H1.1_R2(config-router)#router-id 123.2.2.2 CCIERNSTRICKS.COM_H1.1_R2(config-router)#network 123.2.2.2 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R2(config-router)#network 123.10.1.9 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R2(config-router)#network 123.10.1.17 0.0.0.0 area 0 R3: CCIERNSTRICKS.COM_H1.1_R3(config)#router ospf 12345 CCIERNSTRICKS.COM_H1.1_R3(config-router)#router-id 123.3.3.3 CCIERNSTRICKS.COM_H1.1_R3(config-router)#network 123.3.3.3 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R3(config-router)#network 123.10.1.10 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.13 0.0.0.0 area 0 R4: CCIERNSTRICKS.COM_H1.1_R4(config)#router ospf 12345 CCIERNSTRICKS.COM_H1.1_R4(config-router)#router-id 123.4.4.4 CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.4.4.4 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.2 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.18 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R4(config-router)#network 123.10.1.21 0.0.0.0 area 0 R5: CCIERNSTRICKS.COM_H1.1_R5(config)#router ospf 12345 CCIERNSTRICKS.COM_H1.1_R5(config-router)#router-id 123.5.5.5 CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.5.5.5 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.10.1.6 0.0.0.0 area 0
  • 19. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 145 CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.10.1.14 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R5(config-router)#network 123.10.1.29 0.0.0.0 area 0 R6: CCIERNSTRICKS.COM_H1.1_R6(config)#router ospf 12345 CCIERNSTRICKS.COM_H1.1_R6(config-router)#router-id 123.6.6.6 CCIERNSTRICKS.COM_H1.1_R6(config-router)#network 123.6.6.6 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R6(config-router)#network 123.10.1.22 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R6(config-router)#network 123.10.1.25 0.0.0.0 area 0 R7: CCIERNSTRICKS.COM_H1.1_R7(config)#router ospf 12345 CCIERNSTRICKS.COM_H1.1_R7(config-router)#router-id 123.7.7.7 CCIERNSTRICKS.COM_H1.1_R7(config-router)#network 123.7.7.7 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R7(config-router)#network 123.10.1.26 0.0.0.0 area 0 CCIERNSTRICKS.COM_H1.1_R7(config-router)#network 123.10.1.30 0.0.0.0 area 0
  • 20. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 146 2.2 EIGRP IN AS34567 Configure EIGRP for ipv4 in the New York office (AS34567) according to the following requirements  The EIGRP AS is 34567  The interface lo0 must be seen as an internal EIGRP prefix by all other routers  Ensure the EIGRP is not running on any interface that is facing another AS use any method to accomplish this  Using a single command on one switch only ensure that R8 instal ls two equal-cost route for the following three path and you are not allowed to use any virtual name vlan 411 int lo0 of SW4 int lo0 of R11  Using a single command on one switch only ensure that R9 installs two equal cost route for the following three path vlan 310 int lo0 of SW3 int lo0 of R10 R8#sh ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP + - replicated route, % - next hop override Gateway of last resort is not set 101.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 101.1.34.0/30 is directly connected, Ethernet0/0 L 101.1.34.2/32 is directly connected, Ethernet0/0 123.0.0.0/8 is variably subnetted, 15 subnets, 2 masks C 123.8.8.8/32 is directly connected, Loopback0
  • 21. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 147 D 123.9.9.9/32 [90/409600] via 123.10.2.2, 00:04:37, Ethernet0/2 C 123.10.2.0/30 is directly connected, Ethernet0/2 L 123.10.2.1/32 is directly connected, Ethernet0/2 C 123.10.2.4/30 is directly connected, Ethernet0/1 L 123.10.2.5/32 is directly connected, Ethernet0/1 D 123.10.2.8/30 [90/307200] via 123.10.2.2, 00:04:37, Ethernet0/2 D 123.10.2.12/30 [90/307200] via 123.10.2.6, 00:04:37, Ethernet0/1 D 123.10.2.16/30 [90/281856] via 123.10.2.6, 00:04:27, Ethernet0/1 D 123.10.2.20/30 [90/307456] via 123.10.2.6, 00:04:37, Ethernet0/1 [90/307456] via 123.10.2.2, 00:04:37, Ethernet0/2 D 123.10.2.24/30 [90/307456] via 123.10.2.6, 00:00:25, Ethernet0/1 D 123.10.10.10/32 [90/409856] via 123.10.2.6, 00:04:27, Ethernet0/1 D 123.11.11.11/32 [90/435456] via 123.10.2.6, 00:00:11, Ethernet0/1 [90/435456] via 123.10.2.2, 00:00:11, Ethernet0/2 D 123.33.33.33/32 [90/409600] via 123.10.2.6, 00:04:27, Ethernet0/1 D 123.44.44.44/32 [90/435200] via 123.10.2.6, 00:04:37, Ethernet0/1 [90/435200] via 123.10.2.2, 00:04:37, Ethernet0/2 R9#sh ip route Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2 i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2 ia - IS-IS inter area, * - candidate default, U - per-user static route o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP + - replicated route, % - next hop override Gateway of last resort is not set 33.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 33.34.4.0/30 is directly connected, Ethernet1/0
  • 22. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 148 L 33.34.4.2/32 is directly connected, Ethernet1/0 102.0.0.0/8 is variably subnetted, 2 subnets, 2 masks C 102.1.34.0/30 is directly connected, Ethernet0/0 L 102.1.34.2/32 is directly connected, Ethernet0/0 123.0.0.0/8 is variably subnetted, 15 subnets, 2 masks D 123.8.8.8/32 [90/409600] via 123.10.2.1, 00:04:36, Ethernet0/1 C 123.9.9.9/32 is directly connected, Loopback0 C 123.10.2.0/30 is directly connected, Ethernet0/1 L 123.10.2.2/32 is directly connected, Ethernet0/1 D 123.10.2.4/30 [90/307200] via 123.10.2.1, 00:04:36, Ethernet0/1 C 123.10.2.8/30 is directly connected, Ethernet0/2 L 123.10.2.9/32 is directly connected, Ethernet0/2 D 123.10.2.12/30 [90/307200] via 123.10.2.10, 00:04:46, Ethernet0/2 D 123.10.2.16/30 [90/307456] via 123.10.2.10, 00:04:36, Ethernet0/2 [90/307456] via 123.10.2.1, 00:04:36, Ethernet0/1 D 123.10.2.20/30 [90/281856] via 123.10.2.10, 00:04:47, Ethernet0/2 D 123.10.2.24/30 [90/307456] via 123.10.2.10, 00:00:34, Ethernet0/2 D 123.10.10.10/32 [90/435456] via 123.10.2.10, 00:04:36, Ethernet0/2 [90/435456] via 123.10.2.1, 00:04:36, Ethernet0/1 D 123.11.11.11/32 [90/409856] via 123.10.2.10, 00:00:20, Ethernet0/2 D 123.33.33.33/32 [90/435200] via 123.10.2.10, 00:04:36, Ethernet0/2 [90/435200] via 123.10.2.1, 00:04:36, Ethernet0/1 D 123.44.44.44/32 [90/409600] via 123.10.2.10, 00:04:47, Ethernet0/2 R9#
  • 23. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 149 DIAGRAM: R8 R9 R10 R11 SW3 SW4 ACME NEW YORK BGP AS 34567 123.10.2.X/30 101.1.34.2/30 E0/0 E0/1 .5 E0/1 .18 S38 .6 S310 .17 VLAN 38 VLAN 310 VLAN 34 S34 .13 S34 .14 VLAN 89 E0/2 .1 E0/1 .2 102.1.34.2/30 E0/0 VLAN 49 S49 .10 E0/2 .9 S411 .21 VLAN 411 E0/2 .22 VLAN 111 E0/2 .25 E0/1 .26 E0/0 .2 201.1.34.2/30 E0/0 .2 202.2.34.2/30 SOLUTIONS: R8: CCIERNSTRICKS.COM_H1.1_R8(config)#router eigrp 34567 CCIERNSTRICKS.COM_H1.1_R8(config-router)#no auto CCIERNSTRICKS.COM_H1.1_R8(config-router)#eigrp router-id 123.8.8.8 CCIERNSTRICKS.COM_H1.1_R8(config-router)#net 123.8.8.8 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R8(config-router)#net 123.10.2.1 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R8(config-router)#net 123.10.2.5 0.0.0.0 R9: CCIERNSTRICKS.COM_H1.1_R9(config)#router eigrp 34567 CCIERNSTRICKS.COM_H1.1_R9(config-router)#no auto CCIERNSTRICKS.COM_H1.1_R9(config-router)#eigrp router-id 123.9.9.9 CCIERNSTRICKS.COM_H1.1_R9(config-router)#net 123.9.9.9 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R9(config-router)#net 123.10.2.2 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R9(config-router)#net 123.10.2.9 0.0.0.0 R10: CCIERNSTRICKS.COM_H1.1_R10(config)#router eigrp 34567
  • 24. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 150 CCIERNSTRICKS.COM_H1.1_R10(config-router)#no auto CCIERNSTRICKS.COM_H1.1_R10(config-router)#eigrp router-id 123.10.10.10 CCIERNSTRICKS.COM_H1.1_R10(config-router)#net 123.10.10.10 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R10(config-router)#net 123.10.2.18 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R10(config-router)#net 123.10.2.25 0.0.0.0 R11: CCIERNSTRICKS.COM_H1.1_R11(config)#router eigrp 34567 CCIERNSTRICKS.COM_H1.1_R11(config-router)#no auto CCIERNSTRICKS.COM_H1.1_R11(config-router)#eigrp router-id 123.11.11.11 CCIERNSTRICKS.COM_H1.1_R12(config-router)#net 123.11.11.11 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R12(config-router)#net 123.10.2.22 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R12(config-router)#net 123.10.2.26 0.0.0.0 SW3: CCIERNSTRICKS.COM_H1.1_SW3config)#ip routing CCIERNSTRICKS.COM_H1.1_SW3(config)#router eigrp 34567 CCIERNSTRICKS.COM_H1.1_SW3(config-router)#no auto CCIERNSTRICKS.COM_H1.1_SW3(config-router)#eigrp router-id 123.33.33.33 CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.33.33.33 0.0.0.0 CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.10.2.13 0.0.0.0 CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.10.2.17 0.0.0.0 CCIERNSTRICKS.COM_H1.1_SW3(config-router)#net 123.10.2.6 0.0.0.0 CCIERNSTRICKS.COM_H1.1_SW3(config-)#interface vlan 34 CCIERNSTRICKS.COM_H1.1_SW3(config-if)#delay 100 SW4: CCIERNSTRICKS.COM_H1.1_SW4(config-)#ip routing CCIERNSTRICKS.COM_H1.1_SW4(config)#router eigrp 34567 CCIERNSTRICKS.COM_H1.1_SW4(config-router)#no auto CCIERNSTRICKS.COM_H1.1_SW4(config-router)#eigrp router-id 123.44.44.44 CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.44.44.44 0.0.0.0 CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.10.2.14 0.0.0.0 CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.10.2.10 0.0.0.0 CCIERNSTRICKS.COM_H1.1_SW4(config-router)#net 123.10.2.21 0.0.0.0
  • 25. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 151 CCIERNSTRICKS.COM_H1.1_SW4(config-)#interface vlan 34 CCIERNSTRICKS.COM_H1.1_SW4(config-if)#delay 100
  • 26. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 152 2.3 EIGRP in AS 45678 Configure EIGRP in AS 45678 as the following requirements  The EIGRP autonomous system number is 45678  The interface Loopback 0 at each router must be seen as an Internal EIGRP prefix by all other routers  Ensure the EIGRP is not running on any interface that is facing another AS use any method to accomplish this requirement  SW4 and SW6 are layer 3 switches must configure EIGRP  On all three routers R15,16,17 must use EIGRP the 64bit metric version  Do not change the interface bandwidth on any physical interface in as 45678 DIAGRAM: R15 R16 R17 ACME SYDENY BGP AS 45678 123.20.1.X/30 E0/0 103.2.45.2/30 E0/1 .1 E0/2 .9 E0/1 .2 E0/2 .10 S55 .3 S66 .11 VLAN 55 VLAN 5 VLAN 66 E0/2 .17 E0/1 .18 E0/0 203.3.16.2/30 E0/0 203.3.17.2/30
  • 27. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 153 SOLUTIONS: R15: CCIERNSTRICKS.COM_H1.1_R15(config)#router EIGRP CCIE CCIERNSTRICKS.COM_H1.1_R15(config-router)#address-family ipv4 unicast autonomous-system 45678 CCIERNSTRICKS.COM_H1.1_R15(config-router-af)#network 123.15.15.15 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R15(config-router-af)#network 123.20.1.1 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R15(config-router-af)#network 123.20.1.9 0.0.0.0 R16: CCIERNSTRICKS.COM_H1.1_R16(config)#router EIGRP CCIE CCIERNSTRICKS.COM_H1.1_R16(config-router)#address-family ipv4 unicast autonomous-system 45678 CCIERNSTRICKS.COM_H1.1_R16(config-router-af)#network 123.16.16.16 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R16(config-router-af)#network 123.20.1.2 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R16(config-router-af)#network 123.20.1.17 0.0.0.0 R17: CCIERNSTRICKS.COM_H1.1_R17(config)#router EIGRP CCIE CCIERNSTRICKS.COM_H1.1_R17(config-router)#address-family ipv4 unicast autonomous-system 45678 CCIERNSTRICKS.COM_H1.1_R17(config-router-af)#network 123.17.17.17 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R17(config-router-af)#network 123.20.1.10 0.0.0.0 CCIERNSTRICKS.COM_H1.1_R17(config-router-af)#network 123.20.1.18 0.0.0.0 SW5: CCIERNSTRICKS.COM_H1.1_SW5(config)#router EIGRP 45678 CCIERNSTRICKS.COM_H1.1_SW5(config-router)#network 123.20.1.3 0.0.0.0 CCIERNSTRICKS.COM_H1.1_SW5(config-router-)#network 123.55.55.55 0.0.0.0 IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE INTERFACES SHOUTDOWN THEN MAKE THEM UP CCIERNSTRICKS.COM_H1.1_SW5(config)#interface Vlan5 CCIERNSTRICKS.COM_H1.1_SW5(config-if)#no shutdown CCIERNSTRICKS.COM_H1.1_SW5(config)#interface Vlan55 CCIERNSTRICKS.COM_H1.1_SW5(config-if)#no shutdown
  • 28. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 154 SW6: CCIERNSTRICKS.COM_H1.1_SW6(config)#router EIGRP 45678 CCIERNSTRICKS.COM_H1.1_SW6(config-router)#network 123.20.1.11 0.0.0.0 CCIERNSTRICKS.COM_H1.1_SW6(config-router)#network 123.66.66.66 0.0.0.0 IN EXAM SOME TIME VLAN INTERFACES ARE SHUTDOWN PLEASE CHECK THOSE INTERFACES IF THOSE INTERFACES SHOUTDOWN THEN MAKE THEM UP CCIERNSTRICKS.COM_H1.1_SW6(config)#interface Vlan6 CCIERNSTRICKS.COM_H1.1_SW6(config-if)#no shutdown CCIERNSTRICKS.COM_H1.1_SW6(config)#interface Vlan66 CCIERNSTRICKS.COM_H1.1_SW6(config-if)#no shutdown
  • 29. © 2014-2018 CCIERNSTRICKS.COM July 29, 2018 © 2014-2018 CCIERNSTRICKS.COM 155 2.4 EIGRP in AS 65222  The EIGRP autonomous system number is 45678  The interface Loopback 0 at each router must be seen as an internal EIGRP prefix by all other routers  Ensure the EIGRP is not running on any interface that is facing another AS use any method to accomplish this requirement  R17 is the DMVPN hub, R18, R19 as the spoke use the preconfigured tunnel 0 DIAGRAM: Regional SP-3 BGP 20003 R16 R17 R18 R9 ACME APAC BGP AS 65222 S1/0 203.3.18.2/30 E0/0 E0/0 S1/0 203.3.19.2/30 E0/2 .17 E0/1 .18 E0/0 203.3.16.2/30 E0/0 203.3.17.2/30 10.1.18.1/24 10.1.19.1/24 SOLUTIONS: NOTE:MOST OF THE PART OF THIS QUESTION WILL BE UP AND RUNNING AFTER BGP AND DMVPN CONFIGURATION. THIS TASK IS DEPENDANT TASK 2.7, 2.7 and 3.1, 3.2, 3.3 ONCES THOSE TASK DONE CONFIG WILL WORK R17: CCIERNSTRICKS.COM_H1.1_R17(config)#router EIGRP CCIE CCIERNSTRICKS.COM_H1.1_R17(config-router)#address-family ipv4 unicast autonomous-system 45678 CCIERNSTRICKS.COM_H1.2_R17 (config-router-af)#af-interface tun0 CCIERNSTRICKS.COM_H1.2_R17 (config-router-af-interface)# next-hop-self CCIERNSTRICKS.COM_H1.2_R17 (config-router-af-interface)# split-horizon