ASET Practice Lab
The configuration for the Frame-relay switch is as follows:
Switch#wr t
Building configuration...
Current configuration:
version 11.3
no service password-encryption
Switch#wr t
Building configuration...
Current configuration:
version 11.3
no service password-encryption
hostname Switch
frame-relay switching
interface Serial1/0
no ip address
encapsulation frame-relay
no ip mroute-cache
no fair-queue
clockrate 128000
frame-relay lmi-type ansi
frame-relay intf-type dce
frame-relay route 102 interface Serial1/3 202
no shut
interface Serial1/1
no ip address
encapsulation frame-relay
clockrate 128000
frame-relay lmi-type ansi
frame-relay intf-type dce
frame-relay route 103 interface Serial1/3 203
no shut
interface Serial1/2
no ip address
encapsulation frame-relay
clockrate 128000
frame-relay lmi-type ansi
frame-relay intf-type dce
frame-relay route 104 interface Serial1/3 204
no shut
interface Serial1/3
no ip address
encapsulation frame-relay
clockrate 128000
frame-relay lmi-type ansi
frame-relay intf-type dce
frame-relay route 202 interface Serial1/0 102
frame-relay route 203 interface Serial1/1 103
frame-relay route 204 interface Serial1/2 104
no shut
ip classless
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
login
end
Switch#
Lab 1
Communications Server Setup / Network Connections
The Communications Server is cabled as shown on the previous diagram.
Configure the Communications Server so that when you type the name of a router on the Server you are connected to the console port of that respective router.
Review all of the steps in the following labs and create a network diagram on a separate piece of paper. Include the network numbers, network address ranges, and subnet mask for each network on the diagram.
TIME: 20 minutes
Lab 2
IP Routing Configuration
The objective of this lab is to configure OSPF/IGRP/EIGRP/BGP/RIP in different parts of the network and to redistribute routing information. In the working setup all routers should see every route and should be able to ping any interface in the network. Do NOT configure static routes to accomplish this.
Topology and Basic IP Setup
You will be using the CLASS B network 170.100.0.0. Thus all your addresses should look like 170.100.X.X. Do not use static routes for IP on any router.
Refer to the Frame-Relay Switch configuration for the DLCI's
Configure IP across the Frame Relay network:
Use a 24-bit subnet mask.
Configure Sleepy using two sub-interfaces. Use a sub-interface for the connection to Dopey and use one sub-interface for the connection to Grumpy and Sneezy. Do not configure sub-interfaces for Dopey, Grumpy or Sneezy.
Confirm connectivity across the Frame Relay network by pinging from Grumpy to Sleepy, Grumpy to Sneezy.
TIME: 20 minutes
2.2 Configure IP across the remaining interfaces:
Configure Shorn's Ethernet 0 to IP address 170.100.150.1 with a
24 bit subnet mask.
Configure Dopey's Ethernet 0 to ip address 170.100.200.1 with a 24 bit subnet mask
Subnet Token Ring 0 on Sneezy such that it has 6 host addresses.
Subnet the Loopback 0 on Shorn such that it has 30 host addresses.
Configure ip addresses for VLAN2 and VLAN3. VLAN2 ip address 170.100.42.241, allow 14 hosts, VLAN3 use a 24-bit subnet mask.
Configure an ip address for Dopey's Token Ring 0 with a mask that will allow 254 host on the network. Dopey's interface address is 170.100.51.33.
Configure the ISDN link between Sleepy and Grumpy with a 28-bit subnet mask. Verify pings from Sleepy and Grumpy
Configure ISDN using these numbers:
Port1 SPID1 0835866101 DN 835-8661
Port1 SPID2 0835866301 DN 835-8663
Port2 SPID1 0835866201 DN 835-8662
Port2 SPID2 0835866401 DN 835-8664
Switch type is NI1. Grumpy should be set up as the dialer when it's serial link goes down.
Configure Grumpy to use ISDN as a backup link, when the frame-relay connection to Sleepy is lost.
Verify that you have basic IP setup by pinging the local interfaces that you have just configured.
TIME: 45 minutes
2.3 Configure OSPF on your network as per Diagram 3.
Configure OSPF on Grumpy, Sneezy, Shorn, and Sleepy. Refer to Diagram 3 for area designations.
Ensure that Grumpy can ping Shorn's Loopback 0 interface. Also ensure that Sleepy can ping Grumpy's Ethernet 0 interface.
TIME: 45 minutes
IGRP Configuration and Redistribution
Configure IGRP on your network as per Diagram 3.
Configure IGRP on Sleepy's serial sub-interface and Dopey's Serial 0.
Make sure that these are the ONLY interfaces that are advertising IGRP.
Redistribute OSPF into IGRP on Sleepy.
Verify that Dopey can ping all interfaces in the OSPF domain.
TIME: 45 minutes
EIGRP Configuration and Redistribution
2.5 Configure EIGRP on your network as per Diagram 3.
Configure EIGRP on Sneezy's Token Ring 0.
Make sure that this is the ONLY interface that is advertising EIGRP.
Redistribute OSPF into EIGRP and EIGRP into OSPF.
TIME: 30 minutes
RIP:
2.6 Configure Shorn with RIP on E0 (Refer to diagram). Redistribute to allow full network connectivity.
Make sure that the only route that Shorn accepts from RIP is the network 210.0.5.0 . Also make sure that no routes are being advertised into Backbone 1 from Shorn (refer to the diagram).
TIME: 10 minutes
BGP Configuration
2.7 Configure BGP on Dopey and Grumpy:
Configure Grumpy and Dopey to be IBGP neighbors. Configure BGP on Dopey and Grumpy with an AS of 5. Configure Dopey such that it will pass routes to an EBGP neighbor (170.100.200.7) with an AS of 254.
Configure BGP supernetting using ip address 170.0.0.0, this is to be advertised to AS 254 only. Verify that there are no update problems with this being advertised back into your IGP and BGP.
Make sure that the proper BGP routes are seen by Grumpy.
TIME: 30 minutes
2.7.1 Configure a filter on Dopey such that the only route now seen on Grumpy is 205.15.150.0. Make sure that the only external BGP route that is accepted by Dopey is that of the network 205.15.150.0.
TIME: 15 minutes
2.8 Configure NAT, HSRP, IP Firewall
Network Address Translation
2.8.1 Configure NAT on vlan2. Host addresses are 1.1.1.1 to 1.1.1.253. Use the valid 14-host network on Sleepy's E0 as the valid addresses (into the rest of the network). Make sure that the other routers see the 170.100.42.x route but not the 1.1.1.0 network.
TIME: 15 minutes
HSRP
2.8.2 Configure HSRP between Grumpy and Sneezy. Make sure that no connections are lost when the frame-relay links on either of the routers goes down. Make sure that Grumpy is configured as the active router.
TIME: 10 minutes
IP FIREWALL
2.8.3 Configure an inbound access-list on Dopey's Token Ring 0 interface that satisfies the following criterion:
Telnet sessions are permitted only if originated from Shorn's Ethernet interface subnet. FTP sessions are permitted only if established from Dopey's Token 0 subnet. TFTP is permitted both ways allowed.
SMTP is not
allowed. WWW is not allowed.
TIME: 30 minutes
Lab 3
Appletalk Routing Configuration
Appletalk configuration:
Configure all lan ports for appletalk routing.
Configure Appletalk EIGRP across the OSPF core only, no other serial ints. Configure 2 tunnels: Shorn to Grumpy and Sleepy to Dopey.
TIME: 45 minutes
Appletalk filter:
Configure a filter on Dopey such that it only sees routes and zones from Grumpy.
Filter AppleTalk Zone's on Sneezy such that users on the token ring will only see its own zone.
TIME: 45 minutes
Lab 4
IPX Routing Configuration
IPX configuration:
Enable IPX routing on all routers.
Configure all ports for IPX.
Configure IPX EIGRP across the frame-relay network.
Verify that all routes appear in each router.
Verify that you can IPX ping from any router to any other router.
TIME: 45 minutes
IPX SAP configuration and filter:
Configure two static SAPs on Dopey, one print server and one file sever. Verify that these two SAPs appear in Grumpy's SAP table.
Configure a filter on Grumpy such that it can see only one of the static SAPs. Verify that Grumpy can now only see one of Dopey's static SAPs in his SAP table.
TIME: 45 minutes
IPX route filter:
Configure a filter on Sneezy such that the only IPX routes it sees are Dopey's Token. Verify that only this one route appears in Sneepy's route table.
TIME: 30 minutes
Lab 5
DLSw Configuration
DLSw configuration:
Configure DLSw between Dopey's token 0 and Sleepy's Ethernet 0, and Sneezy's token 0. Verify that the DLSw peers are in the connected state.
TIME: 20 minutes
DLSw protocol filter:
Configure a filter such that the only protocol that is transported via DLSw is NetBIOS. Apply this filter to the DLSw remote peer statement on Dopey.
TIME: 20 minutes
DLSw mac filter:
Change the DLSw configuration such that Sneezy informs all his peers that the only mac address that Sneezy can reach is
4000.3725.0101.
Verify that your configuration is correct by checking the peer capabilities.
TIME: 20 minutes
Lab 6
Multicast IP Configuration
Multicast IP configuration
Configure ip multicast such that a multicast server on VLAN 2 can send multicast packets to receivers on VLAN 3 and Token 1.
TIME: 20 minutes
Lab 7
ATM Configuration
7.1 ATM configuration
Configure int atm 1/0 using the following information so you can ping the ip host 20.20.20.20 on the ATM cloud. LS1010 is already configured.
VPI (# of your Rack)
VCI (# of your rack plus 40)
IP address 20.20.20.#/24 (The host number should be the same as your rack#. Thus ASET 1 would be 20.20.20.1/24)
TIME: 20 minutes
Lab 8
Troubleshooting
TIME: 150 minutes
|
Symptom: |
Problem: |
Remedy: |
|
