SE Practice
CCIE Lab
Lab 1
Communications Server Setup / Network Connections
The Communications Server is cabled as shown on the previous diagram.
Communication Server port 1 is connected to 2513_1 (Shorn)
Communication Server port 2 is connected to 2513_2 (Happy)
Communication Server port 3 is connected to 2524_1 (Sleepy)
Communication Server port 4 is connected to 2524_2 (Grumpy)
Communication Server port 5 is connected to a 3620 acting as a Frame Relay Switch.
Configure the Communications Server so that when you type the name of a router on the Server y 11411f514l ou are connected to the console port of that respective router.
TIME: 30 minutes
Lab 2
IP Routing Configuration
The objective of this lab is to configure OSPF/IGRP/EIGRP/BGP in different parts of the network and to redistribute routing information. In the working setup all routers should see every route and should be able to ping any interface in the network. Do NOT configure static routes to accomplish this.
Topology and Basic IP Setup
You will be using the CLASS B network 172.17.0.0 with the 3'rd octet
set to 59. Thus all your addresses should look like 172.17.59.X
Do not use static routes for IP on any router.
Configure Frame Relay switch:
Configure the frame switch with DLCI's per the lab diagram.
Use LMI type Cisco, and encapsulation IETF
Ports are DCE and the speed should be set to 64K.
Configure IP across the Frame Relay network:
Use a 28 bit subnet mask.
Confirm connectivity across the Frame Relay network by pinging from Grumpy to Sleepy and Grumpy to Shorn.
Use sub-interfaces on Sleepy & Shorn. Use "frame-relay map" statements on Grumpy.
TIME: 30 minutes
Configure IP across the ISDN link:
Grumpy is connected to an ISDN simulator on port 1.
Sleepy is connected to an ISDN simulator on port 2.
Switch type is NI-1
Port 1 SPID1: 0835866101 Directory Number: 835-8661
Port 1 SPID2: 0835866301 Directory Number 835-8663
Port 2 SPID1: 0835866201 Directory Number: 835-8662
Port 2 SPID2: 0835866401 Directory Number 835-8664
Use a 28 bit subnet mask.
Configure the ISDN link such that traffic from Sleepy to Grumpy will force the ISDN line to dial, but not vice-versa.
Confirm connectivity across the ISDN link by pinging from Sleepy to Grumpy.
TIME: 30 minutes
Configure IP across the remaining interfaces:
Subnet Ethernet 0 on Grumpy such that it has 14 host addresses.
Set up the serial link between Grumpy and Dopey as a 64K back to back link. Use a subnet with a 28 bit mask to connect the serial ports.
Set up the serial link between Happy and Shorn as a 64K X.25 back to back link. Use a subnet with a 28 bit mask to connect the serial ports.
Configure Shorn's Ethernet 0 to 172.17.59.137/30.
Configure Shorn's Token Ring 0 with a 29 bit mask.
Subnet Sleepy's Ethernet 0 such that it has 2 hosts.
Subnet Happy's Token Ring 0 with a 30 bit mask.
Verify that you have basic IP setup by pinging the local interfaces that you have just configured.
TIME: 20 minutes
Configure OSPF on your network as per Diagram 3.
Configure OSPF on Grumpy, Shorn, Happy and Sleepy. Refer to Diagram 3 for area designations.
Ensure that Grumpy can ping Sleepy's Ethernet interface and Shorn's Token Ring 0 interface. Also ensure that Sleepy can ping Shorn's
Token Ring 0 interface and Happy's Token Ring 0 interface.
TIME: 45 minutes
Configure ISDN backup of the Frame Relay network:
Configure Sleepy so that the ISDN line will come up if the frame relay connection fails.
Verify you are getting OSPF updates across the ISDN link.
Confirm connectivity across the backup link by pinging from Sleepy to the rest of the network.
TIME: 30 minutes
Configure OSPF MD5 Authentication.
Configure OSPF MD5 authentication between Grumpy and Sleepy.
Configure the MD5 password as "cisco".
Ensure that Grumpy, Sleepy, and Shorn can still see all routes.
TIME: 15 minutes
IGRP Configuration and Redistribution
Configure IGRP on your network as per Diagram 3.
Configure IGRP on Dopey's Ethernet 0, and the serial link between Dopey and Grumpy.
Make sure that these are the ONLY interfaces that are advertising IGRP.
Redistribute between OSPF and IGRP on Grumpy.
Verify that Dopey can ping all interfaces in the OSPF domain.
TIME: 45 minutes
RIP Configuration and Redistribution
2.8 Configure RIP on your network as per Diagram 3.
Configure RIP on Grumpy's Ethernet 0.
Make sure that this is the ONLY interface that is advertising RIP.
Redistribute RIP into OSPF.
Verify that Sleepy, Dopey and Shorn can ping Grumpy's Ethernet 0.
TIME: 20 minutes
BGP Configuration
2.9 Configure External BGP:
Configure 3 loopback interfaces on the frame switch using the network addresses 150.100.0.0, 160.100.0.0, and 170.100.0.0. Configure Ethernet 0 with an IP address of 172.17.59.138 and a 30 bit mask.
Configure BGP on the frame switch with an AS number 100, and set it up to advertise the three networks.
Configure BGP on Shorn using AS 200. Configure BGP between the frame switch and Shorn such that Shorn sees all three loopbacks configured on the frame switch.
A "show ip bgp" and "show ip route" on Shorn should show the three routes advertised by the frame switch.
TIME: 30 minutes
2.10 Configure Internal BGP:
Configure BGP between Grumpy and Shorn. Make sure they are part of the same AS.
Configure BGP on Sleepy using the same AS. Configure BGP on Sleepy so that it is a neighbor to Grumpy ONLY. DO NOT make Sleepy a neighbor to Shorn.
DO NOT redistribute between BGP and OSPF, RIP or IGRP.
A "show ip bgp" and "show ip route" on Grumpy and Sleepy should show the three routes advertised by the frame switch.
TIME: 30 minutes
Configure a filter on Shorn such that the only BGP route now seen on Grumpy, Shorn and Sleepy is 150.100.0.0.
TIME: 15 minutes
Change BGP Weight
Configure Grumpy such that the weight is set to 1000 and the metric 10 for network 150.100.0.0.
TIME: 20 minutes
IP FIREWALL
2.13 Configure an inbound access-list on Dopey's Serial 0 interface
that satisfies the following criterion:
Telnet sessions are permitted only if originated from Shorn's ethernet interface subnet.
FTP sessions are permitted only if established from Dopey's Ethernet 0 subnet.
TFTP is permitted both ways allowed.
SMTP is not allowed.
WWW is not allowed.
Confirm connectivity after applying the access list. Ping Dopey's Ethernet 0 from Sleepy. Also show a telnet to Dopey from Grumpy fails.
TIME: 30 minutes
NTP
Set the clock on Grumpy.
Configure Grumpy as an NTP master clock. Configure Shorn so that it will update its clock from Grumpy.
TIME: 15 minutes
Lab 3
Appletalk Routing Configuration
Appletalk configuration:
Configure all ports for appletalk. Use different cable ranges and zones on each interface.
Configure EIGRP for appletalk across the frame-relay network only.
Make sure that EIGRP is the only routing protocol running on the frame-relay network.
TIME: 45 minutes
Appletalk filter:
Configure a filter on Grumpy such that Dopey only sees routes and zones from Shorn.
TIME: 25 minutes
Lab 4
Decnet Routing Configuration
Decnet configuration:
Enable Decnet routing on all routers.
Configure Dopey to be in a separate DECnet area from the rest of the routers.
Verify that you can DEC ping from any router to any other router.
TIME: 45 minutes
Lab 5
IPX Routing Configuration
IPX configuration:
Enable IPX routing on all routers.
Configure all ports for IPX.
Configure IPX EIGRP across the frame-relay network.
EIGRP should be the ONLY IPX protocol running on the frame-relay.
Verify that all routes appear in each router.
Verify that you can IPX ping from any router to any other router.
TIME: 45 minutes
IPX SAP configuration and filter:
Configure two static SAPs on Dopey.
Verify that these two SAPs appear in Grumpy's SAP table.
Configure a filter on Grumpy such that it can see only one of the static SAPs.
Verify that Grumpy can now only see one of Dopey's static SAPs in his SAP table.
TIME: 45 minutes
IPX route filter:
Configure a filter on Sleepy such that the only IPX routes it sees are Dopey's ethernet and serial.
Verify that only these two routes appear in Sleepy's route table.
TIME: 30 minutes
Lab 6
DLSw Configuration
DLSw configuration:
Configure DLSw between Shorn's ethernet 0 and Sleepy's Ethernet 0.
Verify that the DLSw peers are in the connected state.
TIME: 20 minutes
DLSw protocol filter:
Configure a filter such that the only protocol that is transported via DLSw is NetBIOS.
Apply this filter to the DLSw remote peer statement on Shorn.
TIME: 20 minutes
DLSw mac filter:
Change the DLSw configuration such that Sleepy informs all his
peers that the only mac address that Shorn can reach is
4000.3725.0101.
Verify that your configuration is correct by checking the peer capabilities.
TIME: 20 minutes
|
