ccna routing and switching: scaling...
TRANSCRIPT
CCNA Routing and Switching:Scaling Networks Instructor Lab Manual
This document is exclusive property of Cisco Systems, Inc. Permission is granted to print and copy this document for non-commercial distribution and exclusive use by instructors in the CCNA Routing and Switching: Scaling Networks courseas part of an official Cisco Networking Academy Program.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 3
Network by Design (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Explain the need to design a hierarchical network that is scalable.
Instructor Note: This activity can be completed by individuals or groups of two students. It can then be shared with another individual, group, class, or the instructor.
Scenario
Your employer is opening a new, branch office.
You have been reassigned to the site as the network administrator where your job will be to design and maintain the new branch network.
The network administrators at the other branches used the Cisco three-layer hierarchical model when designing their networks. You decide to use the same approach.
To get an idea of what using the hierarchical model can do to enhance the design process, you research the topic.
Resources
World Wide Web access
Word processing software
Directions
Step 1: Use the Internet to find information and take notes about the Cisco three-layer
hierarchical model. The site should include information about the:
a. Access layer
b. Distribution layer
c. Core layer
Step 2: In your research, make sure to include:
a. A simple definition of each hierarchical layer
b. Three concise facts about each layer
c. Network device capabilities needed at each layer
d. A detailed graphic that shows a full, three-layer hierarchical model design
Step 3: Create a simple table to organize and share your research with another student, group,
the class, or instructor.
Suggested Activity Example Solution: (information based on The Cisco Three-Layered
Hierarchical Model and LAN Design)
Network by Design
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 3
Access Layer
Definition This hierarchical layer connects local clients to the network. It is sometimes called the desktop layer.
Facts At this level:
Network equipment works with the distribution and core layers to send and
receive transmissions from clients and users.
Collision domains are created using switches.
Switches can be configured to filter MAC addresses and share bandwidth.
Network Device Features
Port security
VLANs functionality
Fast Ethernet/Gigabit Ethernet transmissions
Power over Ethernet (PoE)
Link aggregation
Quality of service (QoS)
Distribution Layer
Definition This hierarchical layer provides policy-based, decision-making network connectivity to the access layer below it and the core layer above it.
Facts At this level:
Firewalls and access lists can be placed.
Link aggregation can occur.
Broadcast and multicast domain boundaries are created.
Network Device Features
Layer 3 support
High forwarding rate
Gigabit Ethernet/10 Gigabit Ethernet
Redundant components
Security policies/access control lists
Link aggregation
Quality of service (QoS)
Core Layer
Definition This hierarchical layer is the backbone of the network. It includes high-powered routers and switches that use high-speed cabling, such as fiber optics. The main function of this layer is reliable delivery of network packets.
Facts At this level:
All other layers of the hierarchical design model are supported.
Network by Design
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 3
Load balancing is desired as an integral service.
Efficient, fast, reliable data paths ensure fast network transmissions.
Network Device Features
Layer 3 support
Very high forwarding rate
Gigabit Ethernet/10 Gigabit Ethernet
Redundant components
Link aggregation
Quality of service (QoS)
Three-Layer Hierarchical Design Graphic
Identify elements of the model that map to IT-related content:
Network design
Cisco three-layer hierarchical model
Access layer
Distribution layer
Core layer
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 5
Lab – Selecting Switching Hardware (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
Part 1: Explore Cisco Switch Products
Part 2: Select an Access Layer Switch
Part 3: Select a Distribution/Core Layer Switch
Background / Scenario
As a Network Engineer, you are part of a team that selects appropriate devices for your network. You need to consider the network requirements for the company as they migrate to a converged network. This converged network supports voice over IP (VoIP), video streaming, and expansion of the company to support a larger customer base.
For a small- to medium-sized company, Cisco hierarchical network design suggests only using a two-tier LAN design. This design consists of an access layer and a collapsed core/distribution layer. Network switches come in different form factors, and with various features and functions. When selecting a switch, the team must choose between fixed configuration or modular configuration, and stackable or non-stackable switches.
Based on a given set of requirements, you will identify the Cisco switch models and features to support the requirements. The scope of this lab will limit the switch models to campus LAN only.
Required Resources
PC with Internet access
Part 1: Explore Cisco Switch Products
In Part 1, you will navigate the Cisco website and explore available switch products.
Step 1: Navigate the Cisco website.
At www.cisco.com, a list of available products and information about these products is available.
a. From the home page, click Products & Services > Switches.
Step 2: Explore switch products.
In the Feature Products section, a list of different categories of switches is displayed. In this lab, you will explore the campus LAN switches. You can click different links to gather information about the different switch models. On this page, the information is organized in different ways. You can view all available switches by
Lab – Selecting Switching Hardware
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 5
clicking View All Switches. If you click Compare Series, the switches are organized by types: modular vs. fixed configuration.
a. Click the heading Campus LAN – Core and Distribution Switches.
List a few models and some of features in the table below.
Model Uplink Speed
Number of
Ports/Speed Other Features
Catalyst 4500-X 8 x 10 GE (hot swap module) Up to 40 1G/10G ports
hot swappable power supplies, cooling fans and network modules, 1 RU, QoS, Fixed configuration
Catalyst 4500E 1G or 10G Up to 196 1G ports and up to 100 10G ports
PoE+, hot swappable power supplies, cooling fans and network modules, Modular configuration
b. Click the heading Campus LAN – Access Switches.
List a few models and some of features in the table below.
Lab – Selecting Switching Hardware
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 5
Model Uplink Speed
Number of
Ports/Speed Other Features
Catalyst 2960 2x1GE uplink 8, 24, and 48 FE ports
PoE+, advanced QoS, rate-limiting, ACLs, IPv6, multicast, Fixed configuration
Catalyst 3560-X and 3750-X
4x1GE or 10GE uplink ports (optional)
12, 24, and 48 FE/GE ports
QoS, PoE+, hot swappable power supplies, cooling fans and network modules, StackPower and StackWise, Fixed configuration
c. Click the heading Campus LAN – Compact Switches.
List a few models and some of features in the table below.
Model Uplink Speed Number of Ports/Speed Other Features
Catalyst 3560-C 2x1GE uplink 8-12 FE/GE ports
Collocate with users, PoE+, Fixed configuration
Catalyst 2960-C 2x1GE uplink 8-12 FE/GE ports
Collocate with users, PoE / PoE pass-through, Fixed configuration
Part 2: Select an Access Layer Switch
The main function of an access layer switch is to provide network access to end user devices. This switch connects to the core/distribution layer switches. Access switches are usually located in the intermediate distribution frame (IDF). An IDF is mainly used for managing and interconnecting the telecommunications cables between end user devices and a main distribution frame (MDF). There are typically multiple IDFs with uplinks to a single centralized MDF.
An access switch should have the following capabilities: low cost per switch port, high port density, scalable uplinks to higher layers, and user access functions and resiliency. In Part 2, you will select an access switch based on the requirements set by the company. You have reviewed and become familiar with Cisco switch product line.
Lab – Selecting Switching Hardware
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 5
a. Company A requires a replacement access switch in the wiring closet. The company requires the switch to support VoIP and multicast, accommodate future growth of users and increased bandwidth usage. The switch must support a minimum of 35 current users and have a high-speed uplink. List a few of models that meet those requirements.
____________________________________________________________________________________
____________________________________________________________________________________
Answers will vary. 2960-S or 3560-X with 48 port capacity and at least two 1G/10G uplinks
b. Company B would like to extend services to a conference room on an as-needed basis. The switch will be placed on the conference room table, and switch security is a priority.
____________________________________________________________________________________
____________________________________________________________________________________
Answers will vary. A Compact LAN switch such as the 2960-C
Part 3: Select a Distribution/Core Layer Switch
The distribution/core switch is the backbone of the network for the company. A reliable network core is of paramount importance for the function of the company. A network backbone switch provides both adequate capacity for current and future traffic requirements and resilience in the event of failure. They also require high throughput, high availability, and advanced quality of service (QoS). These switches usually reside in the main wiring closet (MDF) along with high speed servers, routers, and the termination point of your ISP.
Lab – Selecting Switching Hardware
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 5
a. Company C will replace a backbone switch in the next budget cycle. The switch must provide redundancy features to minimize possible downtime in the event that an internal component fails. What features can accommodate these requirements for the replacement switch?
____________________________________________________________________________________
____________________________________________________________________________________
Answers will vary. Hotswappable power supplies, cooling fans and network modules, redundant power supplies, StackWise and StackPower
b. Which Cisco Catalyst switches would you recommend?
____________________________________________________________________________________
Answers will vary.3750-X, 4500-X, 4500-E
c. As Company C grows, high speed, such as 10 GB Ethernet, up to 8 uplink ports, and a modular configuration for the switch will become necessary. Which switch models would meet the requirement?
____________________________________________________________________________________
Answers will vary. 4500, 6500
Reflection
What other factors should be considered during the selection process aside from network requirements and costs?
_______________________________________________________________________________________
_______________________________________________________________________________
Space/form factor, power consumption, modular upgrade, longevity of switch, IOS features for the switch
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 1 of 5
Layered Network Design Simulation (Instructor Version)
Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Explain the need to design a hierarchical network that is scalable.
Instructor Note: This activity is can be completed by individual students or groups of two students. It can then be
shared with another individual, group, class, or the instructor.
Scenario
As the network administrator for a very small network, you want to prepare a simulated-network presentation for
your branch manager to explain how the network currently operates.
The small network includes the following equipment:
One 2911 series router
One 3560 switch
One 2960 switch
Four user workstations (PCs or laptops)
One printer
For further instructions on how to complete this activity, open the accompanying PDF.
Resources
Packet Tracer software
Directions
Step 1: Create a simple network topology using Packet Tracer software. Place the devices at
the appropriate levels of the Cisco three-layer hierarchical model design. Include:
a. One 2911 series router
b. One 3560 switch
c. One 2960 switch
d. Four user workstations (PCs or laptops)
e. One printer
Step 2: Using Packet Tracer’s drawing tool and indicate the hierarchical layers with different
color coding and labels:
a. Access Layer
b. Distribution Layer
c. Core Layer
Layered Network Design Simulation
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 2 of 5
Step 3: Configure the network and user devices. Check for end-to-end connectivity.
Step 4: Share your configuration and hierarchical network design Packet Tracer file with
another student, group, the class, or the instructor.
Suggested Activity Example Solution:
Instructor Note: In the Packet Tracer simulation, a 2911 Series router is used in the Core Layer of the network. Normally, a higher-capacity router, such as the Cisco 3800 series routers, would be used at the
Core Layer. Please make students aware of this fact as they work through the activity.
2960 Fixed Switch Configuration:
Cisco_2960_Switch# show running-configuration
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname "Cisco 2960 Switch"
!
spanning-tree mode pvst
!
interface FastEthernet0/1
!
(output omitted)
!
Layered Network Design Simulation
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 3 of 5
interface GigabitEthernet1/1
!
interface GigabitEthernet1/2
!
interface Vlan1
ip address 192.168.10.2 255.255.255.0
shutdown
!
ip default-gateway 192.168.10.1
!
!
line con 0
!
line vty 0 4
no login
line vty 5 15
no login
!
!
End
3560 Switch Configuration
Cisco_3560_Switch# show running-configuration
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname "Cisco 3560 Switch"
!
ip routing
!
spanning-tree mode pvst
!
interface FastEthernet0/1
no switchport
ip address 10.11.48.2 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet0/2
!
<output omitted)
!
interface GigabitEthernet0/1
no switchport
ip address 192.168.10.1 255.255.255.0
Layered Network Design Simulation
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 4 of 5
duplex auto
speed auto
!
interface GigabitEthernet0/2
no switchport
ip address 192.168.11.1 255.255.255.0
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 10.0.0.0
network 192.168.10.0
network 192.168.11.0
no auto-summary
!
ip classless
!
line con 0
!
line aux 0
!
line vty 0 4
login
line vty 5 15
no login
!
End
2911 Router Configuration
2911_Series_Router# show running-configuration
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname "2911 Series Router"
!
license udi pid CISCO2911/K9 sn FTX15248II7
!
spanning-tree mode pvst
!
interface Loopback0
ip address 1.1.1.1 255.255.255.252
Layered Network Design Simulation
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 5 of 5
!
interface GigabitEthernet0/0
ip address 10.11.48.1 255.255.255.252
duplex auto
speed auto
!
<output omitted>
!
router rip
version 2
network 10.0.0.0
network 1.0.0.0
no auto-summary
!
ip classless
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
Identify elements of the model that map to IT-related content:
Network Design
Cisco Three-Layer Hierarchical Model
Access Layer
Distribution Layer
Core Layer
Network Configuration
Network device show running-configuration command
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 2
Stormy Traffic (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Explain the purpose of the Spanning Tree Protocol (STP) in a switched LAN environment with redundant switch links.
Instructor Notes:
Spanning Tree Protocol (STP) and its variations are the focus of this chapter. This modeling activity is
designed to help students realize that a switched network can be shaped using STP or its variations.
This activity can be completed individually, in small groups, or as a class.
Scenario
It is your first day on the job as a network administrator for a small- to medium-sized business. The previous network administrator left suddenly after a network upgrade took place for the business.
During the upgrade, a new switch was added. Since the upgrade, many employees complain that they are having trouble accessing the Internet and servers on your network. In fact, most of them cannot access the network at all. Your corporate manager asks you to immediately research what could be causing these connectivity problems and delays.
So you take a look at the equipment operating on your network at your main distribution facility in the building. You notice that the network topology seems to be visually correct and that cables have been connected correctly, routers and switches are powered on and operational, and switches are connected together to provide backup or redundancy.
However, one thing you do notice is that all of your switches’ status lights are constantly blinking at a very fast pace to the point that they almost appear solid. You think you have found the problem with the connectivity issues your employees are experiencing.
Use the Internet to research STP. As you research, take notes and describe:
Broadcast storm
Switching loops
The purpose of STP
Variations of STP
Complete the reflection questions that accompany the PDF file for this activity. Save your work and be prepared to share your answers with the class.
Resources
Internet access to the World Wide Web
Reflection
1. What is a definition of a broadcast storm? How does a broadcast storm develop?
_______________________________________________________________________________________ A broadcast storm develops when switches forward traffic out of all ports while looking for a destination for the traffic. It develops when switches continuously forward traffic between themselves without time to block interfaces on the switches to create one good path to the destination.
2. What is a definition of a switching loop? What causes a switching loop?
Stormy Traffic
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 2
_______________________________________________________________________________________ A switching loop forms when redundancy is present on switches and the paths formed create a circle of delivery. Packets travel endlessly along the redundant paths, particularly with multicast and broadcast traffic. This causes a myriad of traffic on the network, causing hosts to have problems accessing the network.
3. How can you mitigate broadcast storms and switching loops caused by introducing redundant switches to your network?
_______________________________________________________________________________________ Implement STP or one of its variations. Create VLANs to limit broadcast domains. Check physical connections to make sure that cabling is correct so that switches are not perpetuating broadcasts and routing loops within your network.
4. What is the IEEE standard for STP and some other STP variations, as mentioned in the hyperlinks provided?
_______________________________________________________________________________________ 802.1D (STP), 802.1W (RSTP), and 802.1I (MST)
5. In answer to this scenario, what would be your first step (after visually checking your network) to correcting the described network problem?
_______________________________________________________________________________________ Three answers would be appropriate for this question.
A network protocol analyzer could be used to check and map network traffic, thus identifying what kind of
network problem is present.
Removing the new switch and its cables to isolate the problem might be a troubleshooting step.
Checking each switch to make sure that STP is operational is another possible troubleshooting step.
Identify elements of the model that map to IT-related content:
Spanning Tree Protocol (STP)
Broadcast storms
Switching loops
IEEE STP standards (802.1D, 802.1S, 802.1I)
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 18
Lab – Building a Switched Network with Redundant Links
(Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Addressing Table
Device Interface IP Address Subnet Mask
S1 VLAN 1 192.168.1.1 255.255.255.0
S2 VLAN 1 192.168.1.2 255.255.255.0
S3 VLAN 1 192.168.1.3 255.255.255.0
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Determine the Root Bridge
Part 3: Observe STP Port Selection Based on Port Cost
Part 4: Observe STP Port Selection Based on Port Priority
Background / Scenario
Redundancy increases the availability of devices in the network topology by protecting the network from a single point of failure. Redundancy in a switched network is accomplished through the use of multiple switches or multiple links between switches. When physical redundancy is introduced into a network design, loops and duplicate frames can occur.
The Spanning Tree Protocol (STP) was developed as a Layer 2 loop-avoidance mechanism for redundant links in a switched network. STP ensures that there is only one logical path between all destinations on the network by intentionally blocking redundant paths that could cause a loop.
In this lab, you will use the show spanning-tree command to observe the STP election process of the root bridge. You will also observe the port selection process based on cost and priority.
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 18
Note: The switches used are Cisco Catalyst 2960s with Cisco IOS Release 15.0(2) (lanbasek9 image). Other switches and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs.
Note: Make sure that the switches have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet cables as shown in the topology
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you will set up the network topology and configure basic settings on the switches.
Step 1: Cable the network as shown in the topology.
Attach the devices as shown in the topology diagram, and cable as necessary.
Step 2: Initialize and reload the switches as necessary.
Step 3: Configure basic settings for each switch.
a. Disable DNS lookup.
b. Configure the device name as shown in the topology.
c. Assign class as the encrypted privileged EXEC mode password.
d. Assign cisco as the console and vty passwords and enable login for console and vty lines.
e. Configure logging synchronous for the console line.
f. Configure a message of the day (MOTD) banner to warn users that unauthorized access is prohibited.
g. Configure the IP address listed in the Addressing Table for VLAN 1 on all switches.
h. Copy the running configuration to the startup configuration.
Step 4: Test connectivity.
Verify that the switches can ping one another.
Can S1 ping S2? _________ Yes
Can S1 ping S3? _________ Yes
Can S2 ping S3? _________ Yes
Troubleshoot until you are able to answer yes to all questions.
Part 2: Determine the Root Bridge
Every spanning-tree instance (switched LAN or broadcast domain) has a switch designated as the root bridge. The root bridge serves as a reference point for all spanning-tree calculations to determine which redundant paths to block.
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 18
An election process determines which switch becomes the root bridge. The switch with the lowest bridge identifier (BID) becomes the root bridge. The BID is made up of a bridge priority value, an extended system ID, and the MAC address of the switch. The priority value can range from 0 to 65,535, in increments of 4,096, with a default value of 32,768.
Step 1: Deactivate all ports on the switches.
S1(config)# interface range f0/1-24, g0/1-2
S1(config-if-range)# shutdown
S1(config-if-range)# end
S2(config)# interface range f0/1-24, g0/1-2
S2(config-if-range)# shutdown
S2(config-if-range)# end
S3(config)# interface range f0/1-24, g0/1-2
S3(config-if-range)# shutdown
S3(config-if-range)# end
Step 2: Configure connected ports as trunks.
S1(config)# interface range f0/1-4
S1(config-if-range)# switchport mode trunk
S1(config-if-range)# end
S2(config)# interface range f0/1-4
S2(config-if-range)# switchport mode trunk
S2(config-if-range)# end
S3(config)# interface range f0/1-4
S3(config-if-range)# switchport mode trunk
S3(config-if-range)# end
Step 3: Activate ports F0/2 and F0/4 on all switches.
S1(config)# interface range f0/2, f0/4
S1(config-if-range)# no shutdown
S1(config-if-range)# end
S2(config)# interface range f0/2, f0/4
S2(config-if-range)# no shutdown
S2(config-if-range)# end
S3(config)# interface range f0/2, f0/4
S3(config-if-range)# no shutdown
S3(config-if-range)# end
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 18
Step 4: Display spanning tree information.
Issue the show spanning-tree command on all three switches. The Bridge ID Priority is calculated by adding the priority value and the extended system ID. The extended system ID is always the VLAN number. In the example below, all three switches have equal Bridge ID Priority values (32769 = 32768 + 1, where default priority = 32768, VLAN number = 1); therefore, the switch with the lowest MAC address becomes the root bridge (S2 in the example).
S1# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.4000
Cost 19
Port 2 (FastEthernet0/2)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.8a00
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/2 Root FWD 19 128.2 P2p
Fa0/4 Altn BLK 19 128.4 P2p
S2# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.4000
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96d2.4000
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/2 Desg FWD 19 128.2 P2p
Fa0/4 Desg FWD 19 128.4 P2p
S3# show spanning-tree
VLAN0001
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 18
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.4000
Cost 19
Port 2 (FastEthernet0/2)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.7400
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/2 Root FWD 19 128.2 P2p
Fa0/4 Desg FWD 19 128.4 P2p
Note: The default STP mode on the 2960 switch is Per VLAN Spanning Tree (PVST).
In the diagram below, record the Role and Status (Sts) of the active ports on each switch in the Topology.
Based on the output from your switches, answer the following questions.
Which switch is the root bridge? ____________ Answers will vary, the above output shows S2 as the root bridge.
Why did spanning tree select this switch as the root bridge?
_______________________________________________________________________________________
The root bridge was chosen because it had the lowest bridge ID (Priority value + extended system ID (VLAN) + MAC address of switch).
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 18
Which ports are the root ports on the switches? _________________________ Answers will vary, the above output shows S1 – F0/2, and S3 – F0/2.
Which ports are the designated ports on the switches? __________________________ Answers will vary, the above output shows S2 – F0/2 and F0/4, S3 – F0/4
What port is showing as an alternate port and is currently being blocked? _________________ Answers will vary, the above output shows S1 – F0/4.
Why did spanning tree select this port as the non-designated (blocked) port?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
The spanning tree algorithm (STA) uses the root bridge as the reference point and then determines which ports to block based on path cost. If path costs are equal it then compares BIDs. Lower numbers are preferred. In the output above, the link between S1 and S3 has the highest cost to the root bridge. The path cost through both switches is the same, so STA selected the path through the switch with the lower BID, and blocked the port (F0/4) on the switch with the higher BID (S1).
Part 3: Observe STP Port Selection Based on Port Cost
The spanning tree algorithm (STA) uses the root bridge as the reference point and then determines which ports to block, based on path cost. The port with the lower path cost is preferred. If port costs are equal, then spanning tree compares BIDs. If the BIDs are equal, then the port priorities are used to break the tie. Lower values are always preferred. In Part 3, you will change the port cost to control which port is blocked by spanning tree.
Step 1: Locate the switch with the blocked port.
With the current configuration, only one switch should have a port that is blocked by STP. Issue the show spanning-tree command on both non-root switches. In the example below, spanning tree is blocking port F0/4 on the switch with the highest BID (S1).
S1# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.4000
Cost 19
Port 2 (FastEthernet0/2)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.8a00
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/2 Root FWD 19 128.2 P2p
Fa0/4 Altn BLK 19 128.4 P2p
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 18
S3# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.4000
Cost 19
Port 2 (FastEthernet0/2)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.7400
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 15 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/2 Root FWD 19 128.2 P2p
Fa0/4 Desg FWD 19 128.4 P2p
Note: Root bridge and port selection may differ in your topology.
Step 2: Change port cost.
In addition to the blocked port, the only other active port on this switch is the port designated as the root port. Lower the cost of this root port to 18 by issuing the spanning-tree cost 18 interface configuration mode command.
S1(config)# interface f0/2
S1(config-if)# spanning-tree cost 18
Step 3: Observe spanning tree changes.
Re-issue the show spanning-tree command on both non-root switches. Observe that the previously blocked port (S1 - F0/4) is now a designated port and spanning tree is now blocking a port on the other non-root switch (S3 - F0/4).
S1# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.4000
Cost 18
Port 2 (FastEthernet0/2)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.8a00
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 18
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/2 Root FWD 18 128.2 P2p
Fa0/4 Desg FWD 19 128.4 P2p
S3# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.4000
Cost 19
Port 2 (FastEthernet0/2)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.7400
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/2 Root FWD 19 128.2 P2p
Fa0/4 Altn BLK 19 128.4 P2p
Why did spanning tree change the previously blocked port to a designated port, and block the port that was a designated port on the other switch?
_______________________________________________________________________________________
STP looks at path cost first. The port with the lower path cost will always be preferred over a port with a higher path cost.
Step 4: Remove port cost changes.
a. Issue the no spanning-tree cost 18 interface configuration mode command to remove the cost statement that you created earlier.
S1(config)# interface f0/2
S1(config-if)# no spanning-tree cost 18
b. Re-issue the show spanning-tree command to verify that STP has reset the port on the non-root switches back to the original port settings. It takes approximately 30 seconds for STP to complete the port transition process.
Part 4: Observe STP Port Selection Based on Port Priority
If port costs are equal, then spanning tree compares BIDs. If the BIDs are equal, then the port priorities are used to break the tie. The default port priority value is 128. STP aggregates the port priority with the port number to break ties. Lower values are always preferred. In Part 4, you will activate redundant paths to each switch to observe how STP selects a port using the port priority.
a. Activate ports F0/1 and F0/3 on all switches.
S1(config)# interface range f0/1, f0/3
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 18
S1(config-if-range)# no shutdown
S1(config-if-range)# end
S2(config)# interface range f0/1, f0/3
S2(config-if-range)# no shutdown
S2(config-if-range)# end
S3(config)# interface range f0/1, f0/3
S3(config-if-range)# no shutdown
S3(config-if-range)# end
b. Wait 30 seconds for STP to complete the port transition process, and then issue the show spanning-tree command on the non-root switches. Observe that the root port has moved to the lower numbered port linked to the root switch, and blocked the previous root port.
S1# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.4000
Cost 19
Port 1 (FastEthernet0/1)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.8a00
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 15 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Root FWD 19 128.1 P2p
Fa0/2 Altn BLK 19 128.2 P2p
Fa0/3 Altn BLK 19 128.3 P2p
Fa0/4 Altn BLK 19 128.4 P2p
S3# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.4000
Cost 19
Port 1 (FastEthernet0/1)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.7400
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 18
Aging Time 15 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Root FWD 19 128.1 P2p
Fa0/2 Altn BLK 19 128.2 P2p
Fa0/3 Desg FWD 19 128.3 P2p
Fa0/4 Desg FWD 19 128.4 P2p
What port did STP select as the root port on each non-root switch? _________________________________
Answers will vary, but in the example above S1 – F0/1, and S3 – F0/1.
Why did STP select these ports as the root port on these switches?
_______________________________________________________________________________________
_______________________________________________________________________________________
The default port value of the ports is 128; therefore, STP used the port number to break the tie. It selected the lower port number as the root port, and blocked the higher-numbered port with the redundant path to the root bridge.
Reflection
1. After a root bridge has been selected, what is the first value STP uses to determine port selection?
_______________________________________________________________________________________
Path cost. It selects the path with the lower accumulated cost.
2. If the first value is equal on the two ports, what is the next value that STP uses to determine port selection?
_______________________________________________________________________________________
BID by selecting the lower value.
3. If both values are equal on the two ports, what is the next value that STP uses to determine port selection?
_______________________________________________________________________________________
An aggregation of the port priority and the port number, the lower value is preferred.
Device Configs - Final
Switch S1
S1# show run
Building configuration...
Current configuration : 1829 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S1
!
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 18
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport mode trunk
!
interface FastEthernet0/4
switchport mode trunk
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 18
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
!
ip http server
ip http secure-server
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 18
!
!
banner motd ^C Unauthorized Access is Prohibited! ^C
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
Switch S2
S2# show run
Building configuration...
Current configuration : 1827 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 18
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport mode trunk
!
interface FastEthernet0/4
switchport mode trunk
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
ip address 192.168.1.2 255.255.255.0
!
ip http server
ip http secure-server
!
banner motd ^C Unauthorized Access is Prohibited! ^C
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
Switch S3
S3# show run
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 18
Building configuration...
Current configuration : 1829 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
!
no ip domain-lookup
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport mode trunk
!
interface FastEthernet0/4
switchport mode trunk
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 18
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
Lab – Building a Switched Network with Redundant Links
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 18
shutdown
!
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
ip address 192.168.1.3 255.255.255.0
!
ip http server
ip http secure-server
!
banner motd ^C Unauthorized Access is Prohibited! ^C
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 28
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
(Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Addressing Table
Device Interface IP Address Subnet Mask
S1 VLAN 99 192.168.1.11 255.255.255.0
S2 VLAN 99 192.168.1.12 255.255.255.0
S3 VLAN 99 192.168.1.13 255.255.255.0
PC-A NIC 192.168.0.2 255.255.255.0
PC-C NIC 192.168.0.3 255.255.255.0
VLAN Assignments
VLAN Name
10 User
99 Management
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Configure VLANs, Native VLAN, and Trunks
Part 3: Configure the Root Bridge and Examine PVST+ Convergence
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 28
Part 4: Configure Rapid PVST+, PortFast, BPDU Guard, and Examine Convergence
Background / Scenario
The Per-VLAN Spanning Tree (PVST) protocol is Cisco proprietary. Cisco switches default to PVST. Rapid PVST+ (IEEE 802.1w) is an enhanced version of PVST+ and allows for faster spanning-tree calculations and convergence in response to Layer 2 topology changes. Rapid PVST+ defines three port states: discarding, learning, and forwarding, and provides multiple enhancements to optimize network performance.
In this lab, you will configure the primary and secondary root bridge, examine PVST+ convergence, configure Rapid PVST+ and compare its convergence to PVST+. In addition, you will configure edge ports to transition immediately to a forwarding state using PortFast and prevent the edge ports from forwarding BDPUs using BDPU guard.
Note: This lab provides minimal assistance with the actual commands necessary for configuration. However, the required commands are provided in Appendix A. Test your knowledge by trying to configure the devices without referring to the appendix.
Note: The switches used with CCNA hands-on labs are Cisco Catalyst 2960s with Cisco IOS Release 15.0(2) (lanbasek9 image). Other switches and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs.
Note: Make sure that the switches have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet cables as shown in the topology
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you will set up the network topology and configure basic settings, such as the interface IP addresses, device access, and passwords.
Step 1: Cable the network as shown in the topology.
Step 2: Configure PC hosts.
Step 3: Initialize and reload the switches as necessary.
Step 4: Configure basic settings for each switch.
a. Disable DNS lookup.
b. Configure the device name as shown in the Topology.
c. Assign cisco as the console and vty passwords and enable login.
d. Assign class as the encrypted privileged EXEC mode password.
e. Configure logging synchronous to prevent console messages from interrupting command entry.
f. Shut down all switch ports.
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 28
g. Copy the running configuration to startup configuration.
Part 2: Configure VLANs, Native VLAN, and Trunks
In Part 2, you will create VLANs, assign switch ports to VLANs, configure trunk ports, and change the native VLAN for all switches.
Note: The required commands for Part 2 are provided in Appendix A. Test your knowledge by trying to configure the VLANs, native VLAN, and trunks without referring to the appendix.
Step 1: Create VLANs.
Use the appropriate commands to create VLANs 10 and 99 on all of the switches. Name VLAN 10 as User and VLAN 99 as Management.
S1(config)# vlan 10
S1(config-vlan)# name User
S1(config-vlan)# vlan 99
S1(config-vlan)# name Management
S2(config)# vlan 10
S2(config-vlan)# name User
S2(config-vlan)# vlan 99
S2(config-vlan)# name Management
S3(config)# vlan 10
S3(config-vlan)# name User
S3(config-vlan)# vlan 99
S3(config-vlan)# name Management
Step 2: Enable user ports in access mode and assign VLANs.
For S1 F0/6 and S3 F0/18, enable the ports, configure them as access ports, and assign them to VLAN 10.
S1(config)# interface f0/6
S1(config-if)# no shutdown
S1(config-if)# switchport mode access
S1(config-if)# switchport access vlan 10
S3(config)# interface f0/18
S3(config-if)# no shutdown
S3(config-if)# switchport mode access
S3(config-if)# switchport access vlan 10
Step 3: Configure trunk ports and assign to native VLAN 99.
For ports F0/1 and F0/3 on all switches, enable the ports, configure them as trunk ports, and assign them to native VLAN 99.
S1(config)# interface range f0/1,f0/3
S1(config-if)# no shutdown
S1(config-if)# switchport mode trunk
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 28
S1(config-if)# switchport trunk native vlan 99
S2(config)# interface range f0/1,f0/3
S2(config-if)# no shutdown
S2(config-if)# switchport mode trunk
S2(config-if)# switchport trunk native vlan 99
S3(config)# interface range f0/1,f0/3
S3(config-if)# no shutdown
S3(config-if)# switchport mode trunk
S3(config-if)# switchport trunk native vlan 99
Step 4: Configure the management interface on all switches.
Using the Addressing Table, configure the management interface on all switches with the appropriate IP address.
S1(config)# interface vlan 99
S1(config-if)# ip address 192.168.1.11 255.255.255.0
S2(config)# interface vlan 99
S2(config-if)# ip address 192.168.1.12 255.255.255.0
S3(config)# interface vlan 99
S3(config-if)# ip address 192.168.1.13 255.255.255.0
Step 5: Verify configurations and connectivity.
Use the show vlan brief command on all switches to verify that all VLANs are registered in the VLAN table and that the correct ports are assigned.
S1# show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/2, Fa0/4, Fa0/5, Fa0/7
Fa0/8, Fa0/9, Fa0/10, Fa0/11
Fa0/12, Fa0/13, Fa0/14, Fa0/15
Fa0/16, Fa0/17, Fa0/18, Fa0/19
Fa0/20, Fa0/21, Fa0/22, Fa0/23
Fa0/24, Gi0/1, Gi0/2
10 User active Fa0/6
99 Management active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
S2# show vlan brief
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 28
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/2, Fa0/4, Fa0/5, Fa0/6
Fa0/7, Fa0/8, Fa0/9, Fa0/10
Fa0/11, Fa0/12, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/18
Fa0/19, Fa0/20, Fa0/21, Fa0/22
Fa0/23, Fa0/24, Gi0/1, Gi0/2
10 User active
99 Management active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
S3# show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/2, Fa0/4, Fa0/5, Fa0/6
Fa0/7, Fa0/8, Fa0/9, Fa0/10
Fa0/11, Fa0/12, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/19
Fa0/20, Fa0/21, Fa0/22, Fa0/23
Fa0/24, Gi0/1, Gi0/2
10 User active Fa0/18
99 Management active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
Use the show interfaces trunk command on all switches to verify trunk interfaces.
S1# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa0/1 on 802.1q trunking 99
Fa0/3 on 802.1q trunking 99
Port Vlans allowed on trunk
Fa0/1 1-4094
Fa0/3 1-4094
Port Vlans allowed and active in management domain
Fa0/1 1,10,99
Fa0/3 1,10,99
Port Vlans in spanning tree forwarding state and not pruned
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 28
Fa0/1 none
Fa0/3 1,10,99
S2# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa0/1 on 802.1q trunking 99
Fa0/3 on 802.1q trunking 99
Port Vlans allowed on trunk
Fa0/1 1-4094
Fa0/3 1-4094
Port Vlans allowed and active in management domain
Fa0/1 1,10,99
Fa0/3 1,10,99
Port Vlans in spanning tree forwarding state and not pruned
Fa0/1 1,10,99
Fa0/3 1,10,99
S3# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa0/1 on 802.1q trunking 99
Fa0/3 on 802.1q trunking 99
Port Vlans allowed on trunk
Fa0/1 1-4094
Fa0/3 1-4094
Port Vlans allowed and active in management domain
Fa0/1 1,10,99
Fa0/3 1,10,99
Port Vlans in spanning tree forwarding state and not pruned
Fa0/1 1,10,99
Fa0/3 1,10,99
Use the show running-config command on all switches to verify all other configurations.
S1# show running-config
Building configuration...
Current configuration : 1857 bytes
!
version 15.0
no service pad
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 28
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/2
shutdown
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/4
shutdown
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
shutdown
!
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 28
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 28
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.1.11 255.255.255.0
!
ip http server
ip http secure-server
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
What is the default setting for spanning-tree mode on Cisco switches?
_______________________________________________________________________________________
The default spanning-tree mode is PVST+.
Verify connectivity between PC-A and PC-C. Was your ping successful? __________ Yes.
If your ping was unsuccessful, troubleshoot the configurations until the issue is resolved.
Note: It may be necessary to disable the PC firewall to successfully ping between PCs.
Part 3: Configure the Root Bridge and Examine PVST+ Convergence
In Part 3, you will determine the default root in the network, assign the primary and secondary root, and use the debug command to examine convergence of PVST+.
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 28
Note: The required commands for Part 3 are provided in Appendix A. Test your knowledge by trying to configure the root bridge without referring to the appendix.
Step 1: Determine the current root bridge.
Which command allows a user to determine the spanning-tree status of a Cisco Catalyst switch for all VLANs? Write the command in the space provided.
_______________________________________________________________________________________
show spanning-tree
Use the command on all three switches to determine the answers to the following questions:
Note: There are three instances of the spanning tree on each switch. The default STP configuration on Cisco switches is PVST+, which creates a separate spanning tree instance for each VLAN (VLAN 1 and any user-configured VLANs).
What is the bridge priority of switch S1 for VLAN 1? __________ 32769
What is the bridge priority of switch S2 for VLAN 1? __________ 32769
What is the bridge priority of switch S3 for VLAN 1? __________ 32769
Which switch is the root bridge? __________ Answers will vary. In this configuration, it is switch S3.
Why was this switch elected as the root bridge?
_______________________________________________________________________________________
By default, spanning tree elects the root bridge based on lowest MAC address.
S1# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.5100
Cost 19
Port 3 (FastEthernet0/3)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e2.3d80
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/3 Root FWD 19 128.3 P2p
VLAN0010
Spanning tree enabled protocol ieee
Root ID Priority 32778
Address 0cd9.96d2.5100
Cost 19
Port 3 (FastEthernet0/3)
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 28
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32778 (priority 32768 sys-id-ext 10)
Address 0cd9.96e2.3d80
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/3 Root FWD 19 128.3 P2p
Fa0/6 Desg FWD 19 128.6 P2p
VLAN0099
Spanning tree enabled protocol ieee
Root ID Priority 32867
Address 0cd9.96d2.5100
Cost 19
Port 3 (FastEthernet0/3)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32867 (priority 32768 sys-id-ext 99)
Address 0cd9.96e2.3d80
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/3 Root FWD 19 128.3 P2p
S2# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.5100
Cost 19
Port 3 (FastEthernet0/3)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.6f80
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Altn BLK 19 128.1 P2p
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 28
Fa0/3 Root FWD 19 128.3 P2p
VLAN0010
Spanning tree enabled protocol ieee
Root ID Priority 32778
Address 0cd9.96d2.5100
Cost 19
Port 3 (FastEthernet0/3)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32778 (priority 32768 sys-id-ext 10)
Address 0cd9.96e8.6f80
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Altn BLK 19 128.1 P2p
Fa0/3 Root FWD 19 128.3 P2p
VLAN0099
Spanning tree enabled protocol ieee
Root ID Priority 32867
Address 0cd9.96d2.5100
Cost 19
Port 3 (FastEthernet0/3)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32867 (priority 32768 sys-id-ext 99)
Address 0cd9.96e8.6f80
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Altn BLK 19 128.1 P2p
Fa0/3 Root FWD 19 128.3 P2p
S3# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96d2.5100
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96d2.5100
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 28
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/3 Desg FWD 19 128.3 P2p
VLAN0010
Spanning tree enabled protocol ieee
Root ID Priority 32778
Address 0cd9.96d2.5100
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32778 (priority 32768 sys-id-ext 10)
Address 0cd9.96d2.5100
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/3 Desg FWD 19 128.3 P2p
Fa0/18 Desg FWD 19 128.18 P2p
VLAN0099
Spanning tree enabled protocol ieee
Root ID Priority 32867
Address 0cd9.96d2.5100
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32867 (priority 32768 sys-id-ext 99)
Address 0cd9.96d2.5100
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/3 Desg FWD 19 128.3 P2p
Step 2: Configure a primary and secondary root bridge for all existing VLANs.
Having a root bridge (switch) elected by MAC address may lead to a suboptimal configuration. In this lab, you will configure switch S2 as the root bridge and S1 as the secondary root bridge.
a. Configure switch S2 to be the primary root bridge for all existing VLANs. Write the command in the space provided.
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 28
____________________________________________________________________________________
S2(config)# spanning-tree vlan 1,10,99 root primary
b. Configure switch S1 to be the secondary root bridge for all existing VLANs. Write the command in the space provided.
____________________________________________________________________________________
S1(config)# spanning-tree vlan 1,10,99 root secondary
Use the show spanning-tree command to answer the following questions:
What is the bridge priority of S1 for VLAN 1? __________ 28673
What is the bridge priority of S2 for VLAN 1? __________ 24577
Which interface in the network is in a blocking state? _________________________________________ Interface F0/3 on switch S3
S1# show spanning-tree vlan 1
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 24577
Address 0cd9.96d2.4000
Cost 19
Port 1 (FastEthernet0/1)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 28673 (priority 28672 sys-id-ext 1)
Address 0cd9.96e8.8a00
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 15 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Root FWD 19 128.1 P2p
Fa0/3 Desg FWD 19 128.3 P2p
S2# show spanning-tree vlan 1
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 24577
Address 0cd9.96d2.4000
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 24577 (priority 24576 sys-id-ext 1)
Address 0cd9.96d2.4000
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 15 sec
Interface Role Sts Cost Prio.Nbr Type
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 28
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/3 Desg FWD 19 128.3 P2p
S3# show spanning-tree vlan 1
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 24577
Address 0cd9.96d2.4000
Cost 19
Port 1 (FastEthernet0/1)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.7400
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/1 Root FWD 19 128.1 P2p
Fa0/3 Altn BLK 19 128.3 P2p
Step 3: Change the Layer 2 topology and examine convergence.
To examine PVST+ convergence, you will create a Layer 2 topology change while using the debug command to monitor spanning-tree events.
a. Enter the debug spanning-tree events command in privileged EXEC mode on switch S3.
S3# debug spanning-tree events
Spanning Tree event debugging is on
b. Create a topology change by disabling interface F0/1 on S3.
S3(config)# interface f0/1
S3(config-if)# shutdown
*Mar 1 00:58:56.225: STP: VLAN0001 new root port Fa0/3, cost 38
*Mar 1 00:58:56.225: STP: VLAN0001 Fa0/3 -> listening
*Mar 1 00:58:56.225: STP[1]: Generating TC trap for port FastEthernet0/1
*Mar 1 00:58:56.225: STP: VLAN0010 new root port Fa0/3, cost 38
*Mar 1 00:58:56.225: STP: VLAN0010 Fa0/3 -> listening
*Mar 1 00:58:56.225: STP[10]: Generating TC trap for port FastEthernet0/1
*Mar 1 00:58:56.225: STP: VLAN0099 new root port Fa0/3, cost 38
*Mar 1 00:58:56.225: STP: VLAN0099 Fa0/3 -> listening
*Mar 1 00:58:56.225: STP[99]: Generating TC trap for port FastEthernet0/1
*Mar 1 00:58:56.242: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed
state to down
*Mar 1 00:58:56.242: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan99, changed
state to down
*Mar 1 00:58:58.214: %LINK-5-CHANGED: Interface FastEthernet0/1, changed state to
administratively down
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 28
*Mar 1 00:58:58.230: STP: VLAN0001 sent Topology Change Notice on Fa0/3
*Mar 1 00:58:58.230: STP: VLAN0010 sent Topology Change Notice on Fa0/3
*Mar 1 00:58:58.230: STP: VLAN0099 sent Topology Change Notice on Fa0/3
*Mar 1 00:58:59.220: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1,
changed state to down
*Mar 1 00:59:11.233: STP: VLAN0001 Fa0/3 -> learning
*Mar 1 00:59:11.233: STP: VLAN0010 Fa0/3 -> learning
*Mar 1 00:59:11.233: STP: VLAN0099 Fa0/3 -> learning
*Mar 1 00:59:26.240: STP[1]: Generating TC trap for port FastEthernet0/3
*Mar 1 00:59:26.240: STP: VLAN0001 Fa0/3 -> forwarding
*Mar 1 00:59:26.240: STP[10]: Generating TC trap for port FastEthernet0/3
*Mar 1 00:59:26.240: STP: VLAN0010 sent Topology Change Notice on Fa0/3
*Mar 1 00:59:26.240: STP: VLAN0010 Fa0/3 -> forwarding
*Mar 1 00:59:26.240: STP[99]: Generating TC trap for port FastEthernet0/3
*Mar 1 00:59:26.240: STP: VLAN0099 Fa0/3 -> forwarding
*Mar 1 00:59:26.248: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed
state to up
*Mar 1 00:59:26.248: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan99, changed
state to up
Note: Before proceeding, use the debug output to verify that all VLANs on F0/3 have reached a forwarding state then use the command no debug spanning-tree events to stop the debug output.
Through which port states do each VLAN on F0/3 proceed during network convergence?
____________________________________________________________________________________
Listening, learning, and forwarding
Using the time stamp from the first and last STP debug message, calculate the time (to the nearest second) that it took for the network to converge. Hint: The debug timestamp format is date hh.mm.ss:msec.
____________________________________________________________________________________
Answers may vary slightly but convergence time should be approximately 30 seconds.
Part 4: Configure Rapid PVST+, PortFast, BPDU Guard, and Examine
Convergence
In Part 4, you will configure Rapid PVST+ on all switches. You will configure PortFast and BPDU guard on all access ports, and then use the debug command to examine Rapid PVST+ convergence.
Note: The required commands for Part 4 are provided in Appendix A. Test your knowledge by trying to configure the Rapid PVST+, PortFast, and BPDU guard without referring to the appendix.
Step 1: Configure Rapid PVST+.
a. Configure S1 for Rapid PVST+. Write the command in the space provided.
____________________________________________________________________________________
S1(config)# spanning-tree mode rapid-pvst
b. Configure S2 and S3 for Rapid PVST+.
S2(config)# spanning-tree mode rapid-pvst
S3(config)# spanning-tree mode rapid-pvst
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 28
c. Verify configurations with the show running-config | include spanning-tree mode command.
S1# show running-config | include spanning-tree mode
spanning-tree mode rapid-pvst
S2# show running-config | include spanning-tree mode
spanning-tree mode rapid-pvst
S3# show running-config | include spanning-tree mode
spanning-tree mode rapid-pvst
Step 2: Configure PortFast and BPDU Guard on access ports.
PortFast is a feature of spanning tree that transitions a port immediately to a forwarding state as soon as it is turned on. This is useful in connecting hosts so that they can start communicating on the VLAN instantly, rather than waiting on spanning tree. To prevent ports that are configured with PortFast from forwarding BPDUs, which could change the spanning tree topology, BPDU guard can be enabled. At the receipt of a BPDU, BPDU guard disables a port configured with PortFast.
a. Configure interface F0/6 on S1 with PortFast. Write the command in the space provided.
____________________________________________________________________________________
S1(config)# interface f0/6
S1(config-if)# spanning-tree portfast
b. Configure interface F0/6 on S1 with BPDU guard. Write the command in the space provided.
____________________________________________________________________________________
S1(config)# interface f0/6
S1(config-if)# spanning-tree bpduguard enable
c. Globally configure all non-trunking ports on switch S3 with PortFast. Write the command in the space provided.
____________________________________________________________________________________
S3(config)# spanning-tree portfast default
d. Globally configure all non-trunking PortFast ports on switch S3 with BPDU guard. Write the command in the space provided.
____________________________________________________________________________________
S3(config)# spanning-tree portfast bpduguard default
Step 3: Examine Rapid PVST+ convergence.
a. Enter the debug spanning-tree events command in privileged EXEC mode on switch S3.
b. Create a topology change by enabling interface F0/1 on switch S3.
S3(config)# interface f0/1
S3(config-if)# no shutdown
*Mar 1 01:28:34.946: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up
*Mar 1 01:28:37.588: RSTP(1): initializing port Fa0/1
*Mar 1 01:28:37.588: RSTP(1): Fa0/1 is now designated
*Mar 1 01:28:37.588: RSTP(10): initializing port Fa0/1
*Mar 1 01:28:37.588: RSTP(10): Fa0/1 is now designated
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 28
*Mar 1 01:28:37.588: RSTP(99): initializing port Fa0/1
*Mar 1 01:28:37.588: RSTP(99): Fa0/1 is now designated
*Mar 1 01:28:37.597: RSTP(1): transmitting a proposal on Fa0/1
*Mar 1 01:28:37.597: RSTP(10): transmitting a proposal on Fa0/1
*Mar 1 01:28:37.597: RSTP(99): transmitting a proposal on Fa0/1
*Mar 1 01:28:37.597: RSTP(1): updt roles, received superior bpdu on Fa0/1
*Mar 1 01:28:37.597: RSTP(1): Fa0/1 is now root port
*Mar 1 01:28:37.597: RSTP(1): Fa0/3 blocked by re-root
*Mar 1 01:28:37.597: RSTP(1): synced Fa0/1
*Mar 1 01:28:37.597: RSTP(1): Fa0/3 is now alternate
*Mar 1 01:28:37.597: RSTP(10): updt roles, received superior bpdu on Fa0/1
*Mar 1 01:28:37.597: RSTP(10): Fa0/1 is now root port
*Mar 1 01:28:37.597: RSTP(10): Fa0/3 blocked by re-root
*Mar 1 01:28:37.597: RSTP(10): synced Fa0/1
*Mar 1 01:28:37.597: RSTP(10): Fa0/3 is now alternate
*Mar 1 01:28:37.597: RSTP(99): updt roles, received superior bpdu on Fa0/1
*Mar 1 01:28:37.605: RSTP(99): Fa0/1 is now root port
*Mar 1 01:28:37.605: RSTP(99): Fa0/3 blocked by re-root
*Mar 1 01:28:37.605: RSTP(99): synced Fa0/1
*Mar 1 01:28:37.605: RSTP(99): Fa0/3 is now alternate
*Mar 1 01:28:37.605: STP[1]: Generating TC trap for port FastEthernet0/1
*Mar 1 01:28:37.605: STP[10]: Generating TC trap for port FastEthernet0/1
*Mar 1 01:28:37.605: STP[99]: Generating TC trap for port FastEthernet0/1
*Mar 1 01:28:37.622: RSTP(1): transmitting an agreement on Fa0/1 as a response to a
proposal
*Mar 1 01:28:37.622: RSTP(10): transmitting an agreement on Fa0/1 as a response to a
proposal
*Mar 1 01:28:37.622: RSTP(99): transmitting an agreement on Fa0/1 as a response to a
proposal
*Mar 1 01:28:38.595: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1,
changed state to up
Using the time stamp from the first and last RSTP debug message, calculate the time that it took for the network to converge.
____________________________________________________________________________________
Answers may vary slightly but convergence time should be under a second.
Reflection
1. What is the main benefit of using Rapid PVST+?
_______________________________________________________________________________________
Rapid PVST+ decreases the time of Layer 2 convergence significantly over PVST+.
2. How does configuring a port with PortFast allow for faster convergence?
_______________________________________________________________________________________
PortFast allows for an access port to immediately transition into a forwarding state which decreases Layer 2 convergence time.
3. What protection does BPDU guard provide?
_______________________________________________________________________________________
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 28
BPDU guard protects the STP domain by disabling access ports that receive a BPDU. BPDUs can be used in a denial of service attack that changes a domain’s root bridge and forces an STP recalculation.
Appendix A – Switch Configuration Commands
Switch S1
S1(config)# vlan 10
S1(config-vlan)# name User
S1(config-vlan)# vlan 99
S1(config-vlan)# name Management
S1(config-vlan)# exit
S1(config)# interface f0/6
S1(config-if)# no shutdown
S1(config-if)# switchport mode access
S1(config-if)# switchport access vlan 10
S1(config-if)# interface f0/1
S1(config-if)# no shutdown
S1(config-if)# switchport mode trunk
S1(config-if)# switchport trunk native vlan 99
S1(config-if)# interface f0/3
S1(config-if)# no shutdown
S1(config-if)# switchport mode trunk
S1(config-if)# switchport trunk native vlan 99
S1(config-if)# interface vlan 99
S1(config-if)# ip address 192.168.1.11 255.255.255.0
S1(config-if)# exit
S1(config)# spanning-tree vlan 1,10,99 root secondary
S1(config)# spanning-tree mode rapid-pvst
S1(config)# interface f0/6
S1(config-if)# spanning-tree portfast
S1(config-if)# spanning-tree bpduguard enable
Switch S2
S2(config)# vlan 10
S2(config-vlan)# name User
S2(config-vlan)# vlan 99
S2(config-vlan)# name Management
S2(config-vlan)# exit
S2(config)# interface f0/1
S2(config-if)# no shutdown
S2(config-if)# switchport mode trunk
S2(config-if)# switchport trunk native vlan 99
S2(config-if)# interface f0/3
S2(config-if)# no shutdown
S2(config-if)# switchport mode trunk
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 28
S2(config-if)# switchport trunk native vlan 99
S2(config-if)# interface vlan 99
S2(config-if)# ip address 192.168.1.12 255.255.255.0
S2(config-if)# exit
S2(config)# spanning-tree vlan 1,10,99 root primary
S2(config)# spanning-tree mode rapid-pvst
Switch S3
S3(config)# vlan 10
S3(config-vlan)# name User
S3(config-vlan)# vlan 99
S3(config-vlan)# name Management
S3(config-vlan)# exit
S3(config)# interface f0/18
S3(config-if)# no shutdown
S3(config-if)# switchport mode access
S3(config-if)# switchport access vlan 10
S3(config-if)# spanning-tree portfast
S3(config-if)# spanning-tree bpduguard enable
S3(config-if)# interface f0/1
S3(config-if)# no shutdown
S3(config-if)# switchport mode trunk
S3(config-if)# switchport trunk native vlan 99
S3(config-if)# interface f0/3
S3(config-if)# no shutdown
S3(config-if)# switchport mode trunk
S3(config-if)# switchport trunk native vlan 99
S3(config-if)# interface vlan 99
S3(config-if)# ip address 192.168.1.13 255.255.255.0
S3(config-if)# exit
S3(config)# spanning-tree mode rapid-pvst
Device Configs – Final
Switch S1
S1#show run
Building configuration...
Current configuration : 1963 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S1
!
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 28
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 1,10,99 priority 28672
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/2
shutdown
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/4
shutdown
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 28
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.1.11 255.255.255.0
!
ip http server
ip http secure-server
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 28
login
line vty 5 15
password cisco
login
!
end
Switch S2
S2#show run
Building configuration...
Current configuration : 1864 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 1,10,99 priority 24576
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/2
shutdown
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/4
shutdown
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 28
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 25 of 28
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.1.12 255.255.255.0
!
ip http server
ip http secure-server
!
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
Switch S3
S3#show run
Building configuration...
Current configuration : 1935 bytes
!
version 15.0
no service pad
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 26 of 28
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode rapid-pvst
spanning-tree portfast default
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/2
shutdown
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/4
shutdown
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 27 of 28
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
Lab – Configuring Rapid PVST+, PortFast, and BPDU Guard
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 28 of 28
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.1.13 255.255.255.0
!
ip http server
ip http secure-server
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 1 of 20
Lab – Configuring HSRP and GLBP (Instructor Version)
Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 2 of 20
Addressing Table
Device Interface IP Address Subnet Mask Default Gateway
R1 G0/1 192.168.1.1 255.255.255.0 N/A
S0/0/0 (DCE) 10.1.1.1 255.255.255.252 N/A
R2 S0/0/0 10.1.1.2 255.255.255.252 N/A
S0/0/1 (DCE) 10.2.2.2 255.255.255.252 N/A
Lo1 209.165.200.225 255.255.255.224 N/A
R3 G0/1 192.168.1.3 255.255.255.0 N/A
S0/0/1 10.2.2.1 255.255.255.252 N/A
S1 VLAN 1 192.168.1.11 255.255.255.0 192.168.1.1
S3 VLAN 1 192.168.1.13 255.255.255.0 192.168.1.3
PC-A NIC 192.168.1.31 255.255.255.0 192.168.1.1
PC-C NIC 192.168.1.33 255.255.255.0 192.168.1.3
Objectives
Part 1: Build the Network and Verify Connectivity
Part 2: Configure First Hop Redundancy using HSRP
Part 3: Configure First Hop Redundancy using GLBP
Background / Scenario
Spanning tree provides loop-free redundancy between switches within your LAN. However, it does not
provide redundant default gateways for end-user devices within your network if one of your routers fails. First Hop Redundancy Protocols (FHRPs) provide redundant default gateways for end devices with no end-user configuration necessary.
In this lab, you will configure two FHRPs. In Part 2, you will configure Cisco’s Hot Standby Routing Protocol (HSRP), and in Part 3 you will configure Cisco’s Gateway Load Balancing Protocol (GLBP).
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with
Cisco IOS Release 15.2(4)M3 (universalk9 image). The switches used are Cisco Catalyst 2960s with Cisco IOS Release 15.0(2) (lanbasek9 image). Other routers, switches, and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary
from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers and switches have been erased and have no startup configurations. If you
are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
2 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 3 of 20
Console cables to configure the Cisco IOS devices via the console ports
Ethernet and serial cables as shown in the topology
Part 1: Build the Network and Verify Connectivity
In Part 1, you will set up the network topology and configure basic settings, such as the interface IP addresses, static routing, device access, and passwords.
Step 1: Cable the network as shown in the topology.
Attach the devices as shown in the topology diagram, and cable as necessary.
Step 2: Configure PC hosts.
Step 3: Initialize and reload the routers and switches as necessary.
Step 4: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure the device name as shown in the topology.
c. Configure IP addresses for the routers as listed in the Addressing Table.
d. Set clock rate to 128000 for all DCE serial interfaces.
e. Assign class as the encrypted privileged EXEC mode password.
f. Assign cisco for the console and vty password and enable login.
g. Configure logging synchronous to prevent console messages from interrupting command entry.
h. Copy the running configuration to the startup configuration.
Step 5: Configure basic settings for each switch.
a. Disable DNS lookup.
b. Configure the device name as shown in the topology.
c. Assign class as the encrypted privileged EXEC mode password.
d. Configure IP addresses for the switches as listed in the Addressing Table.
e. Configure the default gateway on each switch.
f. Assign cisco for the console and vty password and enable login.
g. Configure logging synchronous to prevent console messages from interrupting command entry.
h. Copy the running configuration to the startup configuration.
Step 6: Verify connectivity between PC-A and PC-C.
Ping from PC-A to PC-C. Were the ping results successful? ________________ Yes
If the pings are not successful, troubleshoot the basic device configurations before continuing.
Note: It may be necessary to disable the PC firewall to successfully ping between PCs.
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 4 of 20
Step 7: Configure routing.
a. Configure OSPF on the routers in area 0 with process ID of 1. Add all the networks, except
209.165.200.224/27 into the OSPF process.
b. Configure a default route on R2 using Lo1 as the exit interface to 209.165.200.224/27 network.
c. On R2, use the following commands to redistribute the default route into the OSPF process.
R2(config)# router ospf 1
R2(config-router)# default-information originate
Instructor Note: The command default-information originate will be covered in a later chapter.
Step 8: Verify connectivity.
a. From PC-A, you should be able to ping every interface on R1, R2, R3, and PC-C. Were all pings successful? ______________ Yes
If the pings are not successful, troubleshoot the basic device configurations before continuing.
b. From PC-C, you should be able to ping every interface on R1, R2, R3, and PC-A. Were all pings successful? ______________ Yes
If the pings are not successful, troubleshoot the basic device configurations before continuing.
Part 2: Configure First Hop Redundancy Using HSRP
Even though the topology has been designed with some redundancy (two routers and two switches on the
same LAN network), both PC-A and PC-C are configured with only one gateway address. PC-A is using R1 and PC-C is using R3. If either of these routers or the interfaces on the routers went down, the PC could lose its connection to the Internet.
In Part 2, you will test how the network behaves both before and after configuring HSRP. To do this, you will determine the path that packets take to the loopback address on R2.
Step 1: Determine the path for Internet traffic for PC-A and PC-C.
a. From a command prompt on PC-A, issue a tracert command to the 209.165.200.225 loopback address of R2.
C:\ tracert 209.165.200.225
Tracing route to 209.165.200.225 over a maximum of 30 hops
1 1 ms 1 ms 1 ms 192.168.1.1
2 13 ms 13 ms 13 ms 209.165.200.225
Trace complete.
What path did the packets take from PC-A to 209.165.200.225? _________________________________
PC-A to R1 to R2
b. From a command prompt on PC-C, issue a tracert command to the 209.165.200.225 loopback address of R2.
What path did the packets take from PC-C to 209.165.200.225? ________________________________
PC-C to R3 to R2
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 5 of 20
Step 2: Start a ping session on PC-A, and break the connection between S1 and R1.
a. From a command prompt on PC-A, issue a ping –t command to the 209.165.200.225 address on R2.
Make sure you leave the command prompt window open.
Note: The pings continue until you press Ctrl+C, or until you close the command prompt window.
C:\ ping –t 209.165.200.225
Pinging 209.165.200.225 with 32 bytes of data:
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
<output omitted>
b. As the ping continues, disconnect the Ethernet cable from F0/5 on S1. You can also shut down the S1
F0/5 interface, which creates the same result.
What happened to the ping traffic?
____________________________________________________________________________________
After the cable was disconnected from F0/5 on S1 (or the interface was shut down), pings failed. Sample output is below.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
<output omitted>
c. Repeat Steps 2a and 2b on PC-C and S3. Disconnect cable from F0/5 on S3.
What were your results?
____________________________________________________________________________________
The results were the same as on PC-A. After the Ethernet cable was disconnected from F0/5 on S3, the
pings failed.
d. Reconnect the Ethernet cables to F0/5 or enable the F0/5 interface on both S1 and S3, respectively. Re-issue pings to 209.165.200.225 from both PC-A and PC-C to make sure connectivity is re-established.
Step 3: Configure HSRP on R1 and R3.
In this step, you will configure HSRP and change the default gateway address on PC-A, PC-C, S1, and S2 to the virtual IP address for HSRP. R1 becomes the active router via configuration of the HSRP priority
command.
a. Configure HSRP on R1.
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 6 of 20
R1(config)# interface g0/1
R1(config-if)# standby 1 ip 192.168.1.254
R1(config-if)# standby 1 priority 150
R1(config-if)# standby 1 preempt
b. Configure HSRP on R3.
R3(config)# interface g0/1
R3(config-if)# standby 1 ip 192.168.1.254
c. Verify HSRP by issuing the show standby command on R1 and R3.
R1# show standby
GigabitEthernet0/1 - Group 1
State is Active
1 state change, last state change 00:02:11
Virtual IP address is 192.168.1.254
Active virtual MAC address is 0000.0c07.ac01
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 0.784 secs
Preemption enabled
Active router is local
Standby router is 192.168.1.3, priority 100 (expires in 9.568 sec)
Priority 150 (configured 150)
Group name is "hsrp-Gi0/1-1" (default)
R3# show standby
GigabitEthernet0/1 - Group 1
State is Standby
4 state changes, last state change 00:02:20
Virtual IP address is 192.168.1.254
Active virtual MAC address is 0000.0c07.ac01
Local virtual MAC address is 0000.0c07.ac01 (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 2.128 secs
Preemption disabled
Active router is 192.168.1.1, priority 150 (expires in 10.592 sec)
Standby router is local
Priority 100 (default 100)
Group name is "hsrp-Gi0/1-1" (default)
Using the output shown above, answer the following questions:
Which router is the active router? _____________________ R1
What is the MAC address for the virtual IP address? ____________________________ 0000.0c07.ac01
What is the IP address and priority of the standby router?
____________________________________________________________________________________
____________________________________________________________________________________
IP address is 192.168.1.3 and the priority is 100 (the default which is less than that of R1, the active router, with a priority of 150).
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 7 of 20
d. Use the show standby brief command on R1 and R3 to view an HSRP status summary. Sample output is shown below.
R1# show standby brief
P indicates configured to preempt.
|
Interface Grp Pri P State Active Standby Virtual IP
Gi0/1 1 150 P Active local 192.168.1.3 192.168.1.254
R3# show standby brief
P indicates configured to preempt.
|
Interface Grp Pri P State Active Standby Virtual IP
Gi0/1 1 100 Standby 192.168.1.1 local 192.168.1.254
e. Change the default gateway address for PC-A, PC-C, S1, and S3. Which address should you use?
____________________________________________________________________________________
192.168.1.254
f. Verify the new settings. Issue a ping from both PC-A and PC-C to the loopback address of R2. Are the pings successful? __________ Yes
Step 4: Start a ping session on PC-A and break the connection between the switch that is
connected to the Active HSRP router (R1).
a. From a command prompt on PC-A, issue a ping –t command to the 209.165.200.225 address on R2.
Ensure that you leave the command prompt window open.
b. As the ping continues, disconnect the Ethernet cable from F0/5 on S1 or shut down the F0/5 interface.
What happened to the ping traffic?
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
A few packets may be dropped while the Standby router takes over. Sample output is shown below:
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Request timed out.
Request timed out.
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
<output Omitted>
Step 5: Verify HSRP settings on R1 and R3.
a. Issue the show standby brief command on R1 and R3.
Which router is the active router? __________________________________ R3 is now the active router.
b. Reconnect the cable between the switch and the router or enable interface F0/5.
c. Disable the HSRP configuration commands on R1 and R3.
R1(config)# interface g0/1
R1(config-if)# no standby 1
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 8 of 20
R3(config)# interface g0/1
R3(config-if)# no standby 1
Part 3: Configure First Hop Redundancy Using GLBP
By default, HSRP does NOT do load balancing. The active router always handles all of the traffic, while the standby router sits unused, unless there is a link failure. This is not an efficient use of resources. GLBP
provides nonstop path redundancy for IP by sharing protocol and MAC addresses between redundant gateways. GLBP also allows a group of routers to share the load of the default gateway on a LAN. Configuring GLBP is very similar to HSRP. Load balancing can be done in a variety of ways using GLBP. In
this lab, you will use the round-robin method.
Step 1: Configure GLBP on R1 and R3.
a. Configure GLBP on R1.
R1(config)# interface g0/1
R1(config-if)# glbp 1 ip 192.168.1.254
R1(config-if)# glbp 1 preempt
R1(config-if)# glbp 1 priority 150
R1(config-if)# glbp 1 load-balancing round-robin
b. Configure GLBP on R3.
R3(config)# interface g0/1
R3(config-if)# glbp 1 ip 192.168.1.254
R3(config-if)# glbp 1 load-balancing round-robin
Step 2: Verify GLBP on R1 and R3.
a. Issue the show glbp brief command on R1 and R3.
R1# show glbp brief
Interface Grp Fwd Pri State Address Active router Standby router
Gi0/1 1 - 150 Active 192.168.1.254 local 192.168.1.3
Gi0/1 1 1 - Active 0007.b400.0101 local -
Gi0/1 1 2 - Listen 0007.b400.0102 192.168.1.3 -
R3# show glbp brief
Interface Grp Fwd Pri State Address Active router Standby router
Gi0/1 1 - 100 Standby 192.168.1.254 192.168.1.1 local
Gi0/1 1 1 - Listen 0007.b400.0101 192.168.1.1 -
Gi0/1 1 2 - Active 0007.b400.0102 local -
Step 3: Generate traffic from PC-A and PC-C to the R2 loopback interface.
a. From a command prompt on PC-A, ping the 209.165.200.225 address of R2.
C:\> ping 209.165.200.225
b. Issue an arp –a command on PC-A. Which MAC address is used for the 192.168.1.254 address?
____________________________________________________________________________________
Answers will vary due to timing, but the MAC address will be either R1 or R3 GLBP G0/1 interface MAC.
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 9 of 20
c. Generate more traffic to the loopback interface of R2. Issue another arp –a command. Did the MAC address change for the default gateway address of 192.168.1.254?
____________________________________________________________________________________
Yes. The MAC address changed from R1 to R3 and back. Note: You may need to have students generate traffic multiple times to see the change.
As you can see, both R1 and R3 play a role in forwarding traffic to the loopback interface of R2. Neither router remains idle.
Step 4: Start a ping session on PC-A, and break the connection between the switch that is
connected to R1.
a. From a command prompt on PC-A, issue a ping –t command to the 209.165.200.225 address on R2. Make sure you leave the command prompt window open.
b. As the ping continues, disconnect the Ethernet cable from F0/5 on S1 or shut down the F0/5 interface.
What happened to the ping traffic?
____________________________________________________________________________________
____________________________________________________________________________________
A few packets are dropped while transitioning to the Standby router. Sample output is shown below.
Reply from 209.165.200.225: bytes=32 time=9ms TTL=254
Request timed out.
Reply from 209.165.200.225: bytes=32 time=18ms TTL=252
Reply from 209.165.200.225: bytes=32 time=18ms TTL=252
Reflection
1. Why would there be a need for redundancy in a LAN?
_______________________________________________________________________________________
In today’s networks, down time can be a critical issue affecting sales, productivity , and general connectivity (IP Telephony phones for example).
2. If you had a choice, which protocol would you implement in your network, HSRP or GLBP? Explain your choice.
_______________________________________________________________________________________
Answers will vary. HSRP is easier to configure. There are more options with GLBP which can make it complex to configure.
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 10 of 20
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0
(F0/0)
Fast Ethernet 0/1
(F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0
(G0/0)
Gigabit Ethernet 0/1
(G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device.
The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs
Router R1 (After Part 3 of this lab)
R1# show run
Building configuration...
Current configuration : 1375 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 11 of 20
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.1 255.255.255.0
glbp 1 ip 192.168.1.254
glbp 1 priority 150
glbp 1 preempt
duplex auto
speed auto
!
interface Serial0/0/0
ip address 10.1.1.1 255.255.255.252
clock rate 128000
!
interface Serial0/0/1
no ip address
shutdown
!
!
router ospf 1
network 10.1.1.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
!
control-plane
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 12 of 20
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
R2# show run
Building configuration...
Current configuration : 1412 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
interface Loopback1
ip address 209.165.200.225 255.255.255.224
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 13 of 20
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 10.1.1.2 255.255.255.252
!
interface Serial0/0/1
ip address 10.2.2.2 255.255.255.252
clock rate 128000
!
!
router ospf 1
network 10.1.1.0 0.0.0.3 area 0
network 10.2.2.0 0.0.0.3 area 0
default-information originate
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Loopback1
!
!
control-plane
!
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 14 of 20
!
scheduler allocate 20000 1000
!
end
Router R3 (After Part 3 of this Lab)
R3# show run
Building configuration...
Current configuration : 1319 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.3 255.255.255.0
glbp 1 ip 192.168.1.254
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 15 of 20
shutdown
clock rate 2000000
!
interface Serial0/0/1
ip address 10.2.2.1 255.255.255.252
!
!
router ospf 1
network 10.2.2.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
!
control-plane
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Switch S1
S1# show run
Building configuration...
Current configuration : 3114 bytes
!
version 15.0
no service pad
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 16 of 20
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
!
no ip domain-lookup
!
crypto pki trustpoint TP-self-signed-2530377856
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2530377856
revocation-check none
rsakeypair TP-self-signed-2530377856
!
!
!1panning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 17 of 20
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.11 255.255.255.0
!
ip default-gateway 192.168.1.254
ip http server
ip http secure-server
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 18 of 20
login
!
end
Switch S3
S3# show run
Building configuration...
Current configuration : 2974 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
!
no ip domain-lookup
!
!
crypto pki trustpoint TP-self-signed-2530358400
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2530358400
revocation-check none
rsakeypair TP-self-signed-2530358400
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 19 of 20
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.13 255.255.255.0
!
Lab – Configuring HSRP and GLBP
© 2014 Cisco and/or its aff iliates. All rights reserved. This document is Cisco Public. Page 20 of 20
ip default-gateway 192.168.1.254
ip http server
ip http secure-server
!
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 5
Documentation Tree (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Identify common STP configuration issues.
Instructor Note: This activity may be completed individually or in small groups.
Scenario
The employees in your building are having difficulty accessing a web server on the network. You look for the
network documentation that the previous network engineer used before he transitioned to a new job; however,
you cannot find any network documentation whatsoever.
Therefore, you decide create your own network recordkeeping system. You decide to start at the access layer of
your network hierarchy. This is where redundant switches are located, as well as the company servers, printers,
and local hosts.
You create a matrix to record your documentation and include access layer switches on the list. You also decide
to document switch names, ports in use, cabling connections, and root ports, designated ports, and alternate
ports.
For more detailed instructions on how to design your model, use the student PDF that accompanies this activity.
Resources
Packet Tracer software
Word processing software
Directions
Step 1: Create the topology diagram with three redundant switches.
Step 2: Connect host devices to the switches.
Step 3: Create the switch documentation matrix.
a. Name and switch location
b. General switch description
c. Model, IOS version, and image name
d. Switch serial number
e. MAC address
f. Ports currently in use
g. Cable connections
h. Root ports
i. Designated ports, status, and cost
j. Alternate ports, status, and cost
Documentation Tree
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 5
Step 4: Use show commands to locate Layer 2 switch information.
a. show version
b. show cdp neighbors detail
c. show spanning-tree
Instructor – Example Activity Answer
Topology Diagram Example
Documentation Form Example (S1 only)
Switch Name and Location S1 – Main Distribution Facility
General Switch Description Access Layer Switch – grants network access for PCs 01-03
Switch Model, IOS Version, and Image Name WS-C2960-24TT
12.2
C2960-LANBASE-M
Switch Serial Number FOC1033Z1EY
Switch MAC Address 0050.0F5C.A2D1
Ports in Use Fa0/2
Fa0/3
Fa0/1
Gi1/1
Gi1/2
Cable Connections Fa0/2 connected to PC-02
Fa0/3 connected to PC-03
Fa0/1 connected to PC-01
Documentation Tree
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 5
Gi1/1 connected to S2 Gi1/1
Gi1/2 connected to S3 Gi1/2
Root Port Gi1/2
Designated Port(s), Status, and Cost Fa0/1, Forwarding, Cost 19
Fa0/3, Forwarding, Cost 19
Fa0/2, Forwarding, Cost 19
Alternate Port(s), Status, and Cost (non-designated port) Gi1/1, Blocking, Cost 4
S1# show version
Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(25)FX, RELEASE
SOFTWARE (fc1)
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Wed 12-Oct-05 22:05 by pt_team
ROM: C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)FX, RELEASE SOFTWARE (fc4)
System returned to ROM by power-on
Cisco WS-C2960-24TT (RC32300) processor (revision C0) with 21039K bytes of memory.
24 FastEthernet/IEEE 802.3 interface(s)
2 Gigabit Ethernet/IEEE 802.3 interface(s)
63488K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address : 0050.0F5C.A2D1
Motherboard assembly number : 73-9832-06
Power supply part number : 341-0097-02
Motherboard serial number : FOC103248MJ
Power supply serial number : DCA102133JA
Model revision number : B0
Motherboard revision number : C0
Model number : WS-C2960-24TT
System serial number : FOC1033Z1EY
Top Assembly Part Number : 800-26671-02
Top Assembly Revision Number : B0
Version ID : V02
CLEI Code Number : COM3K00BRA
Hardware Board Revision Number : 0x01
Switch Ports Model SW Version SW Image
------ ----- ----- ---------- ----------
* 1 26 WS-C2960-24TT 12.2 C2960-LANBASE-M
Configuration register is 0xF
S1#
Documentation Tree
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 5
S1# show cdp neighbors detail
Device ID: S2
Entry address(es):
Platform: cisco 2960, Capabilities: Switch
Interface: GigabitEthernet1/1, Port ID (outgoing port): GigabitEthernet1/1
Holdtime: 151
Version :
Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(25)FX, RELEASE
SOFTWARE (fc1)
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Wed 12-Oct-05 22:05 by pt_team
advertisement version: 2
Duplex: full
---------------------------
Device ID: S3
Entry address(es):
Platform: cisco 2960, Capabilities: Switch
Interface: GigabitEthernet1/2, Port ID (outgoing port): GigabitEthernet1/2
Holdtime: 151
Version :
Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(25)FX, RELEASE
SOFTWARE (fc1)
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Wed 12-Oct-05 22:05 by pt_team
advertisement version: 2
Duplex: full
S1#
Documentation Tree
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 5
S1# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0001.635E.CE64
Cost 4
Port 26(GigabitEthernet1/2)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0050.0F5C.A2D1
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 20
Interface Role Sts Cost Prio.Nbr Type
---------------- ---- --- --------- -------- --------------------------------
Fa0/1 Desg FWD 19 128.1 P2p
Fa0/3 Desg FWD 19 128.3 P2p
Fa0/2 Desg FWD 19 128.2 P2p
Gi1/1 Altn BLK 4 128.25 P2p
Gi1/2 Root FWD 4 128.26 P2p
S1#
Identify elements of the model that map to IT-related content:
Designated ports
Root ports
Alternate ports
STP switch commands output
LAN, Access-Layer documentation
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 2
Imagine This (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Explain the operation of link aggregation in a switched LAN environment.
Instructor Notes: This activity is introductory in nature and designed to help students envision how switches can be physically connected to use EtherChannel.
Students can work individually or in very small groups to research the EtherChannel concept and present their findings briefly to the class.
Scenario
It is the end of the work day. In your small- to medium-sized business, you are trying to explain to the network engineers about EtherChannel and how it looks when it is physically set up. The network engineers have difficulties envisioning how two switches could possibly be connected via several links that collectively act as one channel or connection. Your company is definitely considering implementing an EtherChannel network.
Therefore, you end the meeting with an assignment for the engineers. To prepare for the next day’s meeting, they are to perform some research and bring to the meeting one graphic representation of an EtherChannel network connection. They are tasked with explaining how an EtherChannel network operates to the other engineers.
When researching EtherChannel, a good question to search for is “What does EtherChannel look like?” Prepare a few slides to demonstrate your research that will be presented to the network engineering group. These slides should provide a solid grasp of how EtherChannels are physically created within a network topology. Your goal is to ensure that everyone leaving the next meeting will have a good idea as to why they would consider moving to a network topology using EtherChannel as an option.
Required Resources
Internet connectivity for research
Software program for presentation model
Step 1: Use the Internet to research graphics depicting EtherChannel.
Step 2: Prepare a three-slide presentation to share with the class.
a. The first slide should show a very short, concise definition of a switch-to-switch EtherChannel.
b. The second slide should show a graphic of how a switch-to-switch EtherChannel physical topology would look if used in a small- to medium-sized business.
c. The third slide should list three advantages of using EtherChannel.
Instructor Activity Example Resource
Slide 1: Definition
EtherChannel - EtherChannel provides incremental trunk speeds between Fast Ethernet, Gigabit Ethernet, and 10 Gigabit Ethernet. EtherChannel combines multiple Fast Ethernet up to 800 Mbps, Gigabit Ethernet up to 8 Gbps, and 10 Gigabit Ethernet up to 80 Gbps.
Slide 2: EtherChannel Physical Graphic Example
EtherChannel Physical Image
Imagine This
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 2
Slide 3: Advantages to using EtherChannel (these will vary per student group):
Flexible choice of bundling physical connections
Scalable bandwidth with resiliency and load sharing across bundled switch links
Can also be used to connect router interfaces and servers
Identify elements of the model that map to IT-related content:
EtherChannel
Physical depiction of EtherChannel
Load balancing
Scalable bandwidth
Trunking
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 23
Lab – Configuring EtherChannel (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Addressing Table
Device Interface IP Address Subnet Mask
S1 VLAN 99 192.168.99.11 255.255.255.0
S2 VLAN 99 192.168.99.12 255.255.255.0
S3 VLAN 99 192.168.99.13 255.255.255.0
PC-A NIC 192.168.10.1 255.255.255.0
PC-B NIC 192.168.10.2 255.255.255.0
PC-C NIC 192.168.10.3 255.255.255.0
Objectives
Part 1: Configure Basic Switch Settings
Part 2: Configure PAgP
Part 3: Configure LACP
Background / Scenario
Link aggregation allows the creation of logical links that are comprised of two or more physical links. This provides increased throughput beyond using only one physical link. Link aggregation also provides redundancy if one of the links fails.
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 23
In this lab, you will configure EtherChannel, a form of link aggregation used in switched networks. You will configure EtherChannel using Port Aggregation Protocol (PAgP) and Link Aggregation Control Protocol (LACP).
Note: PAgP is a Cisco-proprietary protocol that you can only run on Cisco switches and on switches that are licensed vendors to support PAgP. LACP is a link aggregation protocol that is defined by IEEE 802.3ad, and it is not associated with any specific vendor.
LACP allows Cisco switches to manage Ethernet channels between switches that conform to the 802.3ad protocol. You can configure up to 16 ports to form a channel. Eight of the ports are in active mode and the other eight are in standby mode. When any of the active ports fail, a standby port becomes active. Standby mode works only for LACP, not for PAgP.
Note: The switches used with CCNA hands-on labs are Cisco Catalyst 2960s with Cisco IOS Release 15.0(2) (lanbasek9 image). Other switches and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs.
Note: Make sure that the switches have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet cables as shown in the topology
Part 1: Configure Basic Switch Settings
In Part 1, you will set up the network topology and configure basic settings, such as the interface IP addresses, device access, and passwords.
Step 1: Cable the network as shown in the topology.
Attach the devices as shown in the topology diagram, and cable as necessary.
Step 2: Initialize and reload the switches.
Step 3: Configure basic settings for each switch.
a. Disable DNS lookup.
b. Configure the device name as displayed in the topology.
c. Encrypt plain text passwords.
d. Create a MOTD banner warning users that unauthorized access is prohibited.
e. Assign class as the encrypted privileged EXEC mode password.
f. Assign cisco as the console and vty password and enable login.
g. Configure logging synchronous to prevent console message from interrupting command entry.
h. Shut down all switchports except the ports connected to PCs.
i. Configure VLAN 99 and name it Management.
j. Configure VLAN 10 and name it Staff.
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 23
k. Configure the switch ports with attached hosts as access ports in VLAN 10.
l. Assign the IP addresses according to the Addressing Table.
m. Copy the running configuration to startup configuration.
Step 4: Configure the PCs.
Assign IP addresses to the PCs according to the Addressing Table.
Part 2: Configure PAgP
PAgP is a Cisco proprietary protocol for link aggregation. In Part 2, a link between S1 and S3 will be configured using PAgP.
Step 1: Configure PAgP on S1 and S3.
For a link between S1 and S3, configure the ports on S1 with PAgP desirable mode and the ports on S3 with PAgP auto mode. Enable the ports after PAgP modes have been configured.
S1(config)# interface range f0/3-4
S1(config-if-range)# channel-group 1 mode desirable
Creating a port-channel interface Port-channel 1
S1(config-if-range)# no shutdown
S3(config)# interface range f0/3-4
S3(config-if-range)# channel-group 1 mode auto
Creating a port-channel interface Port-channel 1
S3(config-if-range)# no shutdown
*Mar 1 00:09:12.792: %LINK-3-UPDOWN: Interface FastEthernet0/3, changed state to up
*Mar 1 00:09:12.792: %LINK-3-UPDOWN: Interface FastEthernet0/4, changed state to up
S3(config-if-range)#
*Mar 1 00:09:15.384: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3,
changed state to up
*Mar 1 00:09:16.265: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4,
changed state to up
S3(config-if-range)#
*Mar 1 00:09:16.357: %LINK-3-UPDOWN: Interface Port-channel1, changed state to up
*Mar 1 00:09:17.364: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel1,
changed state to up
*Mar 1 00:09:44.383: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan1, changed
state to up
Step 2: Examine the configuration on the ports.
Currently the F0/3, F0/4, and Po1 (Port-channel1) interfaces on both S1 and S3 are in access operational mode with the administrative mode in dynamic auto. Verify the configuration using the show run interface interface-id and show interfaces interface-id switchport commands, respectively. The example configuration outputs for F0/3 on S1 are as follows:
S1# show run interface f0/3
Building configuration...
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 23
Current configuration : 103 bytes
!
interface FastEthernet0/3
channel-group 1 mode desirable
S1# show interfaces f0/3 switchport
Name: Fa0/3
Switchport: Enabled
Administrative Mode: dynamic auto
Operational Mode: static access (member of bundle Po1)
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: native
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none
Step 3: Verify that the ports have been aggregated.
S1# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 23
Number of channel-groups in use: 1
Number of aggregators: 1
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) PAgP Fa0/3(P) Fa0/4(P)
S3# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 1
Number of aggregators: 1
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) PAgP Fa0/3(P) Fa0/4(P)
What do the flags, SU and P, indicate in the Ethernet summary?
_______________________________________________________________________________________
_______________________________________________________________________________________
The flag P indicates that the ports are bundled in a port-channel. The flag S indicates that the port-channel is a Layer 2 EtherChannel. The U flag indicates that the EtherChannel is in use.
Step 4: Configure trunk ports.
After the ports have been aggregated, commands applied at the port channel interface affect all the links that were bundled together. Manually configure the Po1 ports on S1 and S3 as trunk ports and assign them to native VLAN 99.
S1(config)# interface port-channel 1
S1(config-if)# switchport mode trunk
S1(config-if)# switchport trunk native vlan 99
S3(config)# interface port-channel 1
S3(config-if)# switchport mode trunk
S3(config-if)# switchport trunk native vlan 99
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 23
Step 5: Verify that the ports are configured as trunk ports.
a. Issue the show run interface interface-id commands on S1 and S3. What commands are listed for F0/3 and F0/4 on both switches? Compare the results to the running configuration for the Po1 interface? Record your observation.
____________________________________________________________________________________
____________________________________________________________________________________
switchport trunk native vlan 99
switchport mode trunk
The commands related to trunk configuration are the same. When the trunk commands were applied to the EtherChannel, the commands also affected the individual links in the bundle.
S1# show run interface po1
Building configuration...
Current configuration : 92 bytes
!
interface Port-channel1
switchport trunk native vlan 99
switchport mode trunk
end
S1# show run interface f0/3
Building configuration...
Current configuration : 126 bytes
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
channel-group 1 mode desirable
end
b. Issue the show interfaces trunk and show spanning-tree commands on S1 and S3. What trunk port is listed? What is the native VLAN? What is concluding result from the output?
____________________________________________________________________________________
The trunk port listed is Po1. The native VLAN is 99. After the links are bundled, only the aggregated interface is listed in some show commands.
From the show spanning-tree output, what is port cost and port priority for the aggregated link?
____________________________________________________________________________________
The port cost for Po1 is 12, and the port priority is 128.
S1# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Po1 on 802.1q trunking 99
Port Vlans allowed on trunk
Po1 1-4094
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 23
Port Vlans allowed and active in management domain
Po1 1,10,99
Port Vlans in spanning tree forwarding state and not pruned
Po1 1,10,99
S3# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Po1 on 802.1q trunking 99
Port Vlans allowed on trunk
Po1 1-4094
Port Vlans allowed and active in management domain
Po1 1,10,99
Port Vlans in spanning tree forwarding state and not pruned
Po1 1,10,99
S1# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96e8.7400
Cost 12
Port 64 (Port-channel1)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.8a00
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Po1 Root FWD 12 128.64 P2p
VLAN0010
Spanning tree enabled protocol ieee
Root ID Priority 32778
Address 0cd9.96e8.7400
Cost 12
Port 64 (Port-channel1)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 23
Bridge ID Priority 32778 (priority 32768 sys-id-ext 10)
Address 0cd9.96e8.8a00
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/6 Desg FWD 19 128.6 P2p
Po1 Root FWD 12 128.64 P2p
VLAN0099
Spanning tree enabled protocol ieee
Root ID Priority 32867
Address 0cd9.96e8.7400
Cost 12
Port 64 (Port-channel1)
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32867 (priority 32768 sys-id-ext 99)
Address 0cd9.96e8.8a00
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Po1 Root FWD 12 128.64 P2p
S3# show spanning-tree
VLAN0001
Spanning tree enabled protocol ieee
Root ID Priority 32769
Address 0cd9.96e8.7400
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32769 (priority 32768 sys-id-ext 1)
Address 0cd9.96e8.7400
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Po1 Desg FWD 12 128.64 P2p
VLAN0010
Spanning tree enabled protocol ieee
Root ID Priority 32778
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 23
Address 0cd9.96e8.7400
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32778 (priority 32768 sys-id-ext 10)
Address 0cd9.96e8.7400
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Fa0/18 Desg FWD 19 128.18 P2p
Po1 Desg FWD 12 128.64 P2p
VLAN0099
Spanning tree enabled protocol ieee
Root ID Priority 32867
Address 0cd9.96e8.7400
This bridge is the root
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Bridge ID Priority 32867 (priority 32768 sys-id-ext 99)
Address 0cd9.96e8.7400
Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec
Aging Time 300 sec
Interface Role Sts Cost Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Po1 Desg FWD 12 128.64 P2p
Part 3: Configure LACP
LACP is an open source protocol for link aggregation developed by the IEEE. In Part 3, the link between S1 and S2, and the link between S2 and S3 will be configured using LACP. Also, the individual links will be configured as trunks before they are bundled together as EtherChannels.
Step 1: Configure LACP between S1 and S2.
S1(config)# interface range f0/1-2
S1(config-if-range)# switchport mode trunk
S1(config-if-range)# switchport trunk native vlan 99
S1(config-if-range)# channel-group 2 mode active
Creating a port-channel interface Port-channel 2
S1(config-if-range)# no shutdown
S2(config)# interface range f0/1-2
S2(config-if-range)# switchport mode trunk
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 23
S2(config-if-range)# switchport trunk native vlan 99
S2(config-if-range)# channel-group 2 mode passive
Creating a port-channel interface Port-channel 2
S2(config-if-range)# no shutdown
Step 2: Verify that the ports have been aggregated.
What protocol is Po2 using for link aggregation? Which ports are aggregated to form Po2? Record the command used to verify.
_______________________________________________________________________________________
_______________________________________________________________________________________
Po2 is using LACP and F0/1 and F0/2 are aggregated to form Po2.
S1# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 2
Number of aggregators: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) PAgP Fa0/3(P) Fa0/4(P)
2 Po2(SU) LACP Fa0/1(P) Fa0/2(P)
S2# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 1
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 23
Number of aggregators: 1
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
2 Po2(SU) LACP Fa0/1(P) Fa0/2(P)
Step 3: Configure LACP between S2 and S3.
a. Configure the link between S2 and S3 as Po3 and use LACP as the link aggregation protocol.
S2(config)# interface range f0/3-4
S2(config-if-range)# switchport mode trunk
S2(config-if-range)# switchport trunk native vlan 99
S2(config-if-range)# channel-group 3 mode active
Creating a port-channel interface Port-channel 3
S2(config-if-range)# no shutdown
S3(config)# interface range f0/1-2
S3(config-if-range)# switchport mode trunk
S3(config-if-range)# switchport trunk native vlan 99
S3(config-if-range)# channel-group 3 mode passive
Creating a port-channel interface Port-channel 3
S3(config-if-range)# no shutdown
b. Verify that the EtherChannel has formed.
S2# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 2
Number of aggregators: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
2 Po2(SU) LACP Fa0/1(P) Fa0/2(P)
3 Po3(SU) LACP Fa0/3(P) Fa0/4(P)
S3# show etherchannel summary
Flags: D - down P - bundled in port-channel
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 23
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 2
Number of aggregators: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) PAgP Fa0/3(P) Fa0/4(P)
3 Po3(SU) LACP Fa0/1(P) Fa0/2(P)
Step 4: Verify end-to-end connectivity.
Verify that all devices can ping each other within the same VLAN. If not, troubleshoot until there is end-to-end connectivity.
Note: It may be necessary to disable the PC firewall to ping between PCs.
Reflection
What could prevent EtherChannels from forming?
_______________________________________________________________________________________
Configuration mismatch, such as trunk port on one end and access port at the other end, different aggregation protocols and different port speed/duplex, would prevent the formation of EtherChannel.
Device Configs
Switch S1
S1# show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/5, Fa0/7, Fa0/8, Fa0/9
Fa0/10, Fa0/11, Fa0/12, Fa0/13
Fa0/14, Fa0/15, Fa0/16, Fa0/17
Fa0/18, Fa0/19, Fa0/20, Fa0/21
Fa0/22, Fa0/23, Fa0/24, Gi0/1
Gi0/2
10 Staff active Fa0/6
99 Management active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 23
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
S1# show run
Building configuration...
Current configuration : 2339 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname S1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
!
no ip domain-lookup
!
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface Port-channel1
switchport trunk native vlan 99
switchport mode trunk
!
interface Port-channel2
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 23
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport mode trunk
channel-group 2 mode active
!
interface FastEthernet0/2
switchport trunk native vlan 99
switchport mode trunk
channel-group 2 mode active
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
channel-group 1 mode desirable
!
interface FastEthernet0/4
switchport trunk native vlan 99
switchport mode trunk
channel-group 1 mode desirable
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 23
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.99.11 255.255.255.0
!
ip http server
ip http secure-server
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 23
!
!
banner motd ^C
Unauthorized Access Prohibited.^C
!
line con 0
password 7 0822455D0A16
logging synchronous
login
line vty 0 4
password 7 0822455D0A16
login
line vty 5 15
password 7 1511021F0725
login
!
end
Switch S2
S2# show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/17, Fa0/19, Fa0/20, Fa0/21
Fa0/22, Fa0/23, Fa0/24, Gi0/1
Gi0/2
10 Staff active Fa0/18
99 Management active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
S2# show run
Building configuration...
Current configuration : 2333 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname S2
!
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 23
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
!
no ip domain-lookup
!
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface Port-channel2
switchport trunk native vlan 99
switchport mode trunk
!
interface Port-channel3
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport mode trunk
channel-group 2 mode passive
!
interface FastEthernet0/2
switchport trunk native vlan 99
switchport mode trunk
channel-group 2 mode passive
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 23
channel-group 3 mode active
!
interface FastEthernet0/4
switchport trunk native vlan 99
switchport mode trunk
channel-group 3 mode active
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
switchport access vlan 10
switchport mode access
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 23
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.99.12 255.255.255.0
!
ip http server
ip http secure-server
!
banner motd ^C
Unauthorized Access Prohibited.^C
!
line con 0
password 7 060506324F41
logging synchronous
login
line vty 0 4
password 7 060506324F41
login
line vty 5 15
password 7 121A0C041104
login
!
end
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 23
Switch S3
S3# show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/17, Fa0/19, Fa0/20, Fa0/21
Fa0/22, Fa0/23, Fa0/24, Gi0/1
Gi0/2
10 Staff active Fa0/18
99 Management active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
S3# show run
Building configuration...
Current configuration : 2331 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname S3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
!
no ip domain-lookup
!
!
!
!
!
!
!
!
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 23
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface Port-channel1
switchport trunk native vlan 99
switchport mode trunk
!
interface Port-channel3
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport mode trunk
channel-group 3 mode passive
!
interface FastEthernet0/2
switchport trunk native vlan 99
switchport mode trunk
channel-group 3 mode passive
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
channel-group 1 mode auto
!
interface FastEthernet0/4
switchport trunk native vlan 99
switchport mode trunk
channel-group 1 mode auto
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 23
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
Lab – Configuring EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 23
!
interface GigabitEthernet0/1
shutdown
!
interface GigabitEthernet0/2
shutdown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.99.13 255.255.255.0
!
ip http server
ip http secure-server
!
!
banner motd ^C
Unauthorized Access Prohibited.^C
!
line con 0
password 7 045802150C2E
logging synchronous
login
line vty 0 4
password 7 110A1016141D
login
line vty 5 15
password 7 070C285F4D06
login
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 25
Lab – Troubleshooting EtherChannel (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Addressing Table
Device Interface IP Address Subnet Mask
S1 VLAN 99 192.168.1.11 255.255.255.0
S2 VLAN 99 192.168.1.12 255.255.255.0
S3 VLAN 99 192.168.1.13 255.255.255.0
PC-A NIC 192.168.0.2 255.255.255.0
PC-C NIC 192.168.0.3 255.255.255.0
VLAN Assignments
VLAN Name
10 User
99 Management
Objectives
Part 1: Build the Network and Load Device Configurations
Part 2: Troubleshoot EtherChannel
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 25
Background / Scenario
The switches at your company were configured by an inexperienced network administrator. Several errors in the configuration have resulted in speed and connectivity issues. Your manager has asked you to troubleshoot and correct the configuration errors and document your work. Using your knowledge of EtherChannel and standard testing methods, find and correct the errors. Ensure that all of the EtherChannels use Port Aggregation Protocol (PAgP), and that all hosts are reachable.
Note: The switches used are Cisco Catalyst 2960s with Cisco IOS Release 15.0(2) (lanbasek9 image). Other switches and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs.
Note: Make sure that the switches have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
2 PCs (Windows 7, Vista, or XP with a terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet cables as shown in the topology
Part 1: Build the Network and Load Device Configurations
In Part 1, you will set up the network topology, configure basic settings on the PC hosts, and load configurations on the switches.
Step 1: Cable the network as shown in the topology.
Step 2: Configure the PC hosts.
Step 3: Erase the startup and VLAN configurations and reload the switches.
Step 4: Load switch configurations.
Load the following configurations into the appropriate switch. All switches have the same passwords. The privileged EXEC password is class. The password for console and vty access is cisco. As all switches are Cisco devices, the network administrator decided to use Cisco’s PAgP on all port channels configured with EtherChannel. Switch S2 is the root bridge for all VLANs in the topology.
Switch S1 Configuration:
hostname S1
interface range f0/1-24, g0/1-2
shutdown
exit
enable secret class
no ip domain lookup
line vty 0 15
password cisco
login
line con 0
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 25
password cisco
logging synchronous
login
exit
vlan 10
name User
vlan 99
Name Management
interface range f0/1-2
switchport mode trunk
! channel-group 1 mode desirable
channel-group 1 mode active
switchport trunk native vlan 99
no shutdown
interface range f0/3-4
channel-group 2 mode desirable
switchport trunk native vlan 99
! switchport mode trunk
no shutdown
interface f0/6
switchport mode access
switchport access vlan 10
no shutdown
interface vlan 99
ip address 192.168.1.11 255.255.255.0
interface port-channel 1
switchport trunk native vlan 99
switchport mode trunk
interface port-channel 2
switchport trunk native vlan 99
switchport mode access
! switchport mode trunk
Switch S2 Configuration:
hostname S2
interface range f0/1-24, g0/1-2
shutdown
exit
enable secret class
no ip domain lookup
line vty 0 15
password cisco
login
line con 0
password cisco
logging synchronous
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 25
login
exit
vlan 10
name User
vlan 99
name Management
spanning-tree vlan 1,10,99 root primary
interface range f0/1-2
switchport mode trunk
channel-group 1 mode desirable
switchport trunk native vlan 99
no shutdown
interface range f0/3-4
switchport mode trunk
channel-group 3 mode desirable
switchport trunk native vlan 99
! no shutdown
interface vlan 99
ip address 192.168.1.12 255.255.255.0
interface port-channel 1
switchport trunk native vlan 99
switchport trunk allowed vlan 1,99
! switchport trunk allowed 1,10,99
interface port-channel 3
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
switchport mode trunk
Switch S3 Configuration:
hostname S3
interface range f0/1-24, g0/1-2
shutdown
exit
enable secret class
no ip domain lookup
line vty 0 15
password cisco
login
line con 0
password cisco
logging synchronous
login
exit
vlan 10
name User
vlan 99
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 25
name Management
interface range f0/1-2
! switchport mode trunk
! channel-group 3 mode desirable
! switchport trunk native vlan 99
! no shutdown
interface range f0/3-4
switchport mode trunk
! channel-group 2 mode desirable
channel-group 3 mode desirable
switchport trunk native vlan 99
no shutdown
interface f0/18
switchport mode access
switchport access vlan 10
no shutdown
interface vlan 99
ip address 192.168.1.13 255.255.255.0
! interface port-channel 2
! switchport trunk native vlan 99
! switchport mode trunk
interface port-channel 3
switchport trunk native vlan 99
switchport mode trunk
Step 5: Save your configuration.
Part 2: Troubleshoot EtherChannel
In Part 2, you must examine the configurations on all switches, make corrections if needed, and verify full functionality.
Step 1: Troubleshoot S1.
a. Use the show interfaces trunk command to verify that the port channels are functioning as trunk ports.
S1# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa0/1 on 802.1q trunking 99
Fa0/2 on 802.1q trunking 99
Port Vlans allowed on trunk
Fa0/1 1-4094
Fa0/2 1-4094
Port Vlans allowed and active in management domain
Fa0/1 1,10,99
Fa0/2 1,10,99
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 25
Port Vlans in spanning tree forwarding state and not pruned
Fa0/1 none
Fa0/2 none
Do port channels 1 and 2 appear as trunked ports? _____ No
b. Use the show etherchannel summary command to verify that interfaces are configured in the correct port channel, the proper protocol is configured, and the interfaces are in use.
S1# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 2
Number of aggregators: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SD) LACP Fa0/1(I) Fa0/2(I)
2 Po2(SD) PAgP Fa0/3(I) Fa0/4(I)
Based on the output, are there any EtherChannel issues? If issues are found, record them in the space provided below.
____________________________________________________________________________________
____________________________________________________________________________________
Yes. Port Channel 1 is configured with the Link Aggregation Control Protocol (LACP), and the ports in Port Channel 2 are functioning independently (I = stand-alone).
c. Use the command show run | begin interface Port-channel command to view the running configuration beginning with the first port channel interface.
S1# show run | begin interface Port-channel
interface Port-channel1
switchport trunk native vlan 99
switchport mode trunk
!
interface Port-channel2
switchport trunk native vlan 99
switchport mode access
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport mode trunk
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 25
channel-group 1 mode active
!
interface FastEthernet0/2
switchport trunk native vlan 99
switchport mode trunk
channel-group 1 mode active
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode access
channel-group 2 mode desirable
!
interface FastEthernet0/4
switchport trunk native vlan 99
switchport mode access
channel-group 2 mode desirable
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
shutdown
!
<output omitted>
d. Resolve all problems found in the outputs from the previous show commands. Record the commands used to correct the configurations.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
S1(config)# interface range f0/1-2
S1(config-if-range)# no channel-group 1 mode active
S1(config-if-range)# channel-group 1 mode desirable
S1(config-if-range)# exit
S1(config)# interface port-channel 2
S1(config-if)# switchport mode trunk
e. Use the show interfaces trunk command to verify trunk settings.
S1# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Po1 on 802.1q trunking 99
Po2 on 802.1q trunking 99
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 25
Port Vlans allowed on trunk
Po1 1-4094
Po2 1-4094
Port Vlans allowed and active in management domain
Po1 1,10,99
Po2 1,10,99
Port Vlans in spanning tree forwarding state and not pruned
Po1 1,10,99
Po2 1,10,99
f. Use the show etherchannel summary command to verify that the port channels are up and in use.
S1# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 2
Number of aggregators: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) PAgP Fa0/1(P) Fa0/2(P)
2 Po2(SU) PAgP Fa0/3(P) Fa0/4(P)
Step 2: Troubleshoot S2.
a. Issue the command to verify that the port channels are functioning as trunk ports. Record the command used in the space provided below.
____________________________________________________________________________________
S2# show interfaces trunk
S2# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Po1 on 802.1q trunking 99
Port Vlans allowed on trunk
Po1 1,99
Port Vlans allowed and active in management domain
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 25
Po1 1,99
Port Vlans in spanning tree forwarding state and not pruned
Po1 1,99
Based on the output, are there any issues with the configurations? If issues are found, record them in the space provided below.
____________________________________________________________________________________
____________________________________________________________________________________
Port Channel 3 is not present in the output, and VLAN 10 is not allowed in Port Channel 1.
b. Issue the command to verify that interfaces are configured in the correct port channel and the proper protocol is configured.
S2# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 2
Number of aggregators: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) PAgP Fa0/1(P) Fa0/2(P)
3 Po3(SD) PAgP Fa0/3(D) Fa0/4(D)
Based on the output, are there any EtherChannel issues? If issues are found, record them in the space provided below.
____________________________________________________________________________________
Yes. Port Channel 3 is down.
c. Use the command show run | begin interface Port-channel to view the running configuration beginning with the first port-channel interface.
S2# show run | begin interface Port-channel
interface Port-channel1
switchport trunk native vlan 99
switchport trunk allowed vlan 1,99
switchport mode trunk
!
interface Port-channel3
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 25
switchport mode trunk
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport trunk allowed vlan 1,99
switchport mode trunk
channel-group 1 mode desirable
!
interface FastEthernet0/2
switchport trunk native vlan 99
switchport trunk allowed vlan 1,99
switchport mode trunk
channel-group 1 mode desirable
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
switchport mode trunk
shutdown
channel-group 3 mode desirable
!
interface FastEthernet0/4
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
switchport mode trunk
shutdown
channel-group 3 mode desirable
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
<output omitted>
d. Resolve all problems found in the outputs from the previous show commands. Record the commands used to correct the configuration.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
S2(config)# interface range f0/3-4
S2(config-if-range)# no shutdown
S2(config-if-range)# exit
S2(config)# interface port-channel 1
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 25
S2(config-if)# switchport trunk allowed vlan 1,10,99
e. Issue the command to verify trunk settings.
S2# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Po1 on 802.1q trunking 99
Port Vlans allowed on trunk
Po1 1,10,99
Port Vlans allowed and active in management domain
Po1 1,10,99
Port Vlans in spanning tree forwarding state and not pruned
Po1 1,10,99
f. Issue the command to verify that the port channels are functioning. Remember that port channel issues can be caused by either end of the link.
S2# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 2
Number of aggregators: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) PAgP Fa0/1(P) Fa0/2(P)
3 Po3(SD) PAgP Fa0/3(D) Fa0/4(D)
Step 3: Troubleshoot S3.
a. Issue the command to verify that the port channels are functioning as trunk ports.
S3# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Po3 on 802.1q trunking 99
Port Vlans allowed on trunk
Po3 1-4094
Port Vlans allowed and active in management domain
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 25
Po3 1,10,99
Port Vlans in spanning tree forwarding state and not pruned
Po3 1,10,99
Based on the output, are there any issues with the configurations? If issues are found, record them in the space provided below.
____________________________________________________________________________________
____________________________________________________________________________________
Port Channel 2 is not present in the output.
b. Issue the command to verify that the interfaces are configured in the correct port channel and that the proper protocol is configured.
S3# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 1
Number of aggregators: 1
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
3 Po3(SU) PAgP Fa0/3(P) Fa0/4(P)
Based on the output, are there any EtherChannel issues? If issues are found, record them in the space provided below.
____________________________________________________________________________________
____________________________________________________________________________________
Port Channel 2 is not present, and Port Channel 3 is incorrectly configured for interfaces f0/3 and f0/4.
c. Use the command show run | begin interface Port-channel command to view the running configuration beginning with the first port channel interface.
S3# show run | begin interface Port-channel
interface Port-channel3
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/1
shutdown
!
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 25
interface FastEthernet0/2
shutdown
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
channel-group 3 mode desirable
!
interface FastEthernet0/4
switchport trunk native vlan 99
switchport mode trunk
channel-group 3 mode desirable
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
<output omitted>
d. Resolve all problems found. Record the commands used to correct the configuration.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
S3(config)# interface range f0/3-4
S3(config-if-range)# channel-group 2 mode desirable
S3(config-if-range)# interface range f0/1-2
S3(config-if-range)# switchport mode trunk
S3(config-if-range)# switchport trunk native vlan 99
S3(config-if-range)# channel-group 3 mode desirable
S3(config-if-range)# no shutdown
e. Issue the command to verify trunk settings. Record the command used in the space provided below.
____________________________________________________________________________________
S3# show interfaces trunk
S3# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Po2 on 802.1q trunking 99
Po3 on 802.1q trunking 99
Port Vlans allowed on trunk
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 25
Po2 1-4094
Po3 1-4094
Port Vlans allowed and active in management domain
Po2 1,10,99
Po3 1,10,99
Port Vlans in spanning tree forwarding state and not pruned
Po2 1,10,99
Po3 1,10,99
f. Issue the command to verify that the port channels are functioning. Record the command used in the space provided below.
____________________________________________________________________________________
S3# show etherchannel summary
S3# show etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
Number of channel-groups in use: 2
Number of aggregators: 2
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
2 Po2(SU) PAgP Fa0/3(P) Fa0/4(P)
3 Po3(SU) PAgP Fa0/1(P) Fa0/2(P)
Step 4: Verify EtherChannel and Connectivity.
a. Use the show interfaces etherchannel command to verify full functionality of the port channels.
S1# show interfaces etherchannel
----
FastEthernet0/1:
Port state = Up Mstr In-Bndl
Channel group = 1 Mode = Desirable-Sl Gcchange = 0
Port-channel = Po1 GC = 0x00010001 Pseudo port-channel = Po1
Port index = 0 Load = 0x00 Protocol = PAgP
Flags: S - Device is sending Slow hello. C - Device is in Consistent state.
A - Device is in Auto mode. P - Device learns on physical port.
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 25
d - PAgP is down.
Timers: H - Hello timer is running. Q - Quit timer is running.
S - Switching timer is running. I - Interface timer is running.
Local information:
Hello Partner PAgP Learning Group
Port Flags State Timers Interval Count Priority Method Ifindex
Fa0/1 SC U6/S7 H 30s 1 128 Any 5001
Partner's information:
Partner Partner Partner Partner Group
Port Name Device ID Port Age Flags Cap.
Fa0/1 S2 0cd9.96e8.6f80 Fa0/1 23s SC 10001
Age of the port in the current state: 0d:00h:38m:38s
----
FastEthernet0/2:
Port state = Up Mstr In-Bndl
Channel group = 1 Mode = Desirable-Sl Gcchange = 0
Port-channel = Po1 GC = 0x00010001 Pseudo port-channel = Po1
Port index = 0 Load = 0x00 Protocol = PAgP
Flags: S - Device is sending Slow hello. C - Device is in Consistent state.
A - Device is in Auto mode. P - Device learns on physical port.
d - PAgP is down.
Timers: H - Hello timer is running. Q - Quit timer is running.
S - Switching timer is running. I - Interface timer is running.
Local information:
Hello Partner PAgP Learning Group
Port Flags State Timers Interval Count Priority Method Ifindex
Fa0/2 SC U6/S7 H 30s 1 128 Any 5001
Partner's information:
Partner Partner Partner Partner Group
Port Name Device ID Port Age Flags Cap.
Fa0/2 S2 0cd9.96e8.6f80 Fa0/2 7s SC 10001
Age of the port in the current state: 0d:00h:38m:38s
----
FastEthernet0/3:
Port state = Up Mstr In-Bndl
Channel group = 2 Mode = Desirable-Sl Gcchange = 0
Port-channel = Po2 GC = 0x00020001 Pseudo port-channel = Po2
Port index = 0 Load = 0x00 Protocol = PAgP
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 25
Flags: S - Device is sending Slow hello. C - Device is in Consistent state.
A - Device is in Auto mode. P - Device learns on physical port.
d - PAgP is down.
Timers: H - Hello timer is running. Q - Quit timer is running.
S - Switching timer is running. I - Interface timer is running.
Local information:
Hello Partner PAgP Learning Group
Port Flags State Timers Interval Count Priority Method Ifindex
Fa0/3 SC U6/S7 H 30s 1 128 Any 5002
Partner's information:
Partner Partner Partner Partner Group
Port Name Device ID Port Age Flags Cap.
Fa0/3 S3 0cd9.96d2.5100 Fa0/3 5s SC 20001
Age of the port in the current state: 0d:00h:28m:48s
----
FastEthernet0/4:
Port state = Up Mstr In-Bndl
Channel group = 2 Mode = Desirable-Sl Gcchange = 0
Port-channel = Po2 GC = 0x00020001 Pseudo port-channel = Po2
Port index = 0 Load = 0x00 Protocol = PAgP
Flags: S - Device is sending Slow hello. C - Device is in Consistent state.
A - Device is in Auto mode. P - Device learns on physical port.
d - PAgP is down.
Timers: H - Hello timer is running. Q - Quit timer is running.
S - Switching timer is running. I - Interface timer is running.
Local information:
Hello Partner PAgP Learning Group
Port Flags State Timers Interval Count Priority Method Ifindex
Fa0/4 SC U6/S7 H 30s 1 128 Any 5002
Partner's information:
Partner Partner Partner Partner Group
Port Name Device ID Port Age Flags Cap.
Fa0/4 S3 0cd9.96d2.5100 Fa0/4 6s SC 20001
Age of the port in the current state: 0d:00h:28m:48s
----
Port-channel1:
Age of the Port-channel = 0d:00h:57m:52s
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 25
Logical slot/port = 2/1 Number of ports = 2
GC = 0x00010001 HotStandBy port = null
Port state = Port-channel Ag-Inuse
Protocol = PAgP
Port security = Disabled
Ports in the Port-channel:
Index Load Port EC state No of bits
------+------+------+------------------+-----------
0 00 Fa0/1 Desirable-Sl 0
0 00 Fa0/2 Desirable-Sl 0
Time since last port bundled: 0d:00h:38m:38s Fa0/1
Time since last port Un-bundled: 0d:00h:42m:15s Fa0/2
----
Port-channel2:
Age of the Port-channel = 0d:00h:57m:48s
Logical slot/port = 2/2 Number of ports = 2
GC = 0x00020001 HotStandBy port = null
Port state = Port-channel Ag-Inuse
Protocol = PAgP
Port security = Disabled
Ports in the Port-channel:
Index Load Port EC state No of bits
------+------+------+------------------+-----------
0 00 Fa0/3 Desirable-Sl 0
0 00 Fa0/4 Desirable-Sl 0
Time since last port bundled: 0d:00h:28m:48s Fa0/4
Time since last port Un-bundled: 0d:00h:28m:51s Fa0/4
b. Verify connectivity of the management VLAN.
Can S1 ping S2? _____ Yes
Can S1 ping S3? _____ Yes
Can S2 ping S3? _____ Yes
c. Verify connectivity of PCs.
Can PC-A ping PC-C? _____ Yes
If EtherChannels are not fully functional, connectivity between switches does not exist, or connectivity between hosts does not exist. Troubleshoot to resolve any remaining issues.
Note: It may be necessary to disable the PC firewall for pings between the PCs to succeed.
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 25
Device Configs - Final
Switch S1
S1#show run
Building configuration...
Current configuration : 2241 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface Port-channel1
switchport trunk native vlan 99
switchport mode trunk
!
interface Port-channel2
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport mode trunk
channel-group 1 mode desirable
!
interface FastEthernet0/2
switchport trunk native vlan 99
switchport mode trunk
channel-group 1 mode desirable
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
channel-group 2 mode desirable
!
interface FastEthernet0/4
switchport trunk native vlan 99
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 25
switchport mode trunk
channel-group 2 mode desirable
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 25
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shudown
!
interface GigabitEthernet0/2
shudown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.1.11 255.255.255.0
!
ip http server
ip http secure-server
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
Switch S2
S2#show run
Building configuration...
Current configuration : 2476 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 25
!
no ip domain-lookup
!
spanning-tree mode pvst
spanning-tree extend system-id
spanning-tree vlan 1,10,99 priority 24576
!
vlan internal allocation policy ascending
!
interface Port-channel1
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
switchport mode trunk
!
interface Port-channel3
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
switchport mode trunk
!
interface FastEthernet0/1
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
switchport mode trunk
channel-group 1 mode desirable
!
interface FastEthernet0/2
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
switchport mode trunk
channel-group 1 mode desirable
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
switchport mode trunk
channel-group 3 mode desirable
!
interface FastEthernet0/4
switchport trunk native vlan 99
switchport trunk allowed vlan 1,10,99
switchport mode trunk
channel-group 3 mode desirable
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 25
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
interface FastEthernet0/18
shutdown
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shudown
!
interface GigabitEthernet0/2
shudown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.1.12 255.255.255.0
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 25
!
ip http server
ip http secure-server
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
Switch S3
S3#show run
Building configuration...
Current configuration : 2239 bytes
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname S3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface Port-channel2
switchport trunk native vlan 99
switchport mode trunk
!
interface Port-channel3
switchport trunk native vlan 99
switchport mode trunk
!
interface FastEthernet0/1
switchport trunk native vlan 99
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 25
switchport mode trunk
channel-group 3 mode desirable
!
interface FastEthernet0/2
switchport trunk native vlan 99
switchport mode trunk
channel-group 3 mode desirable
!
interface FastEthernet0/3
switchport trunk native vlan 99
switchport mode trunk
channel-group 2 mode desirable
!
interface FastEthernet0/4
switchport trunk native vlan 99
switchport mode trunk
channel-group 2 mode desirable
!
interface FastEthernet0/5
shutdown
!
interface FastEthernet0/6
shutdown
!
interface FastEthernet0/7
shutdown
!
interface FastEthernet0/8
shutdown
!
interface FastEthernet0/9
shutdown
!
interface FastEthernet0/10
shutdown
!
interface FastEthernet0/11
shutdown
!
interface FastEthernet0/12
shutdown
!
interface FastEthernet0/13
shutdown
!
interface FastEthernet0/14
shutdown
!
interface FastEthernet0/15
shutdown
!
interface FastEthernet0/16
shutdown
!
interface FastEthernet0/17
shutdown
!
Lab – Troubleshooting EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 25 of 25
interface FastEthernet0/18
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/19
shutdown
!
interface FastEthernet0/20
shutdown
!
interface FastEthernet0/21
shutdown
!
interface FastEthernet0/22
shutdown
!
interface FastEthernet0/23
shutdown
!
interface FastEthernet0/24
shutdown
!
interface GigabitEthernet0/1
shudown
!
interface GigabitEthernet0/2
shudown
!
interface Vlan1
no ip address
!
interface Vlan99
ip address 192.168.1.13 255.255.255.0
!
ip http server
ip http secure-server
!
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 2
Linking Up (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Describe link aggregation.
Instructor Note: This modeling activity is best completed in very small groups and then shared with another group or the class.
Scenario
Many bottlenecks occur on your small- to medium-sized business network, even though you have configured VLANs, STP, and other network traffic options on the company’s switches.
Instead of keeping the switches as they are currently configured, you would like to try EtherChannel as an option for, at least, part of the network to see if it will lesson traffic congestion between your access and distribution layer switches.
Your company uses Catalyst 3560 switches at the distribution layer and Catalyst 2960 and 2950 switches at the access layer of the network. To verify if these switches can perform EtherChannel, you visit the System Requirements to Implement EtherChannel on Catalyst Switches. This site allows you to gather more information to determine if EtherChannel is a good option for the equipment and network currently in place.
After researching the models, you decide to use a simulation software program to practice configuring EtherChannel before implementing it live on your network. As a part of this procedure, you ensure that the equipment simulated in Packet Tracer will support these practice configurations.
Resources
World Wide Web connectivity
Packet Tracer software
Word processing or spreadsheet software
Directions
Step 1: Visit System Requirements to Implement EtherChannel on Catalyst Switches.
a. Pay particular attention to the Catalyst 3560, 2960, and 2950 model information.
b. Record any information you feel would be useful to deciding whether to use EtherChannel in your company.
Step 2: Create a matrix to record the information you recorded in Step 1b, including:
a. Number of ports allowed to bundled for an EtherChannel group
b. Maximum group bandwidth supported by bundling the ports
c. IOS version needed to support EtherChannel on the switch model
d. Load balancing availability
e. Load balancing configuration options
f. Network layers supported for EtherChannel operation
Linking Up
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 2
Step 3: Open Packet Tracer.
a. Notice how many ports are available to bundle for EtherChannel on all three switch models.
b. Check all three models to see how many EtherChannel groups you could create on each model.
c. Make sure the IOS version is recent enough to support all EtherChannel configurations.
d. Do not configure your simulated network, but do check the models available in the Packet Tracer to make sure they will support all the EtherChannel configuration options.
Step 4: Share your matrix with another group or the class.
Instructor – Example Activity Solution
EtherChannel Requirements Catalyst 3560 Catalyst 2960 Catalyst 2950
Maximum number of ports allowed for channel groups
8 8 8
Etherchannel bandwidth created per group
800 Mbps
8 Gbps
800 Mbps
2 Gbps
800 Mbps
2 Gbps
Minimum IOS Version supported
12.1(19)EA 12.2(25)FX 12.0(5.2)WC(1)
Load balancing types
MAC or IP address
Source or destination
Source and destination
MAC or IP address
Source or destination
Source and destination
MAC address
Source or destination
OSI Model layers supported for configuration
Layers 2 and 3 Layers 2 and 3 Layer 2
Packet Tracer program IOS version
1.2(37)SE1 12.2(25r)FX 12.1(22)EA4
Number of Packet Tracer ports available for channel groups
24 FastEthernet
2 GigabitEthernet
24 FastEthernet
2 GigabitEthernet 24 FastEthernet
Identify elements of the model that map to IT-related content:
EtherChannel
EtherChannel switch models
Bandwidth for channel groups
EtherChannel configuration layers
IOS for switch models using EtherChannel
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 2
Make Mine Wireless (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Explain how wireless LAN components are deployed in a small- to medium-sized business.
Instructor Notes: This activity can be completed individually, in small groups, or as a class.
Scenario
As the network administrator for your small- to medium-sized business, you realize that your wireless network needs updating, both inside and outside of your building. Therefore, you decide to research how other businesses and educational and community groups set up their WLANs for better access to their employees and clients.
To research this topic, you visit the Customer Case Studies and Research website to see how other businesses use wireless technology. After viewing a few of the videos, or reading some of the case study PDFs, you decide to select two to show to your CEO to support upgrading to a more robust wireless solution for your company.
To complete this class modeling activity, open the accompanying PDF for further instructions on how to proceed.
Resources
Internet access to the WWW
Step 1: Open your browser and the URL specified for this activity.
a. Choose two case studies about wireless LAN upgrades from the list to read, located on the Customer Case Studies and Research website.
b. As you view the media or read the PDFs, write notes for the following categories:
1) The WLAN challenge that the company sought to mitigate
2) The solution that was found to the challenge
3) The results that were gained by WLAN updates
Step 2: Share your findings.
a. Share your findings with the class or a classmate.
b. Play the media or show the PDF for one of the case studies you chose from the URL page.
c. In your own words, explain the challenge, solution, and results learned from the media or PDF.
d. Explain how the results you found could be applied to improve your company’s network.
Instructor Suggested Example
Barrick Gold Corporation
Challenge
Provide continuous access and updates to the Caterpillar Minestar software for fleet management, drilling and blasting, loading, hauling, dozing, and truck management.
Solutions
Created an outdoor mesh wireless network, deployed on solar-powered trailers across the mine and inside the mining pit.
Make Mine Wireless
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 2
Results
Closely monitored dispatch process and managed operational efficiency.
Improved productivity and safety.
Cut costs by implementing single network for communications and data sharing of new applications.
Identify elements of the model that map to IT-related content:
Wireless topologies
Inside-building wireless solutions
Outside-building wireless solutions
Wireless LAN devices
Wireless LAN communication
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 3
Lab – Investigating Wireless Implementations (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
Part 1: Explore Integrated Wireless Routers
Part 2: Explore Wireless Access Points
Background / Scenario
The number of mobile devices, such as smart phones, tablets, and laptops, continues to increase. These mobile devices can connect via integrated wireless routers or wireless access points (WAPs) to access the Internet and other network resources. Wireless routers are typically employed in home and small business networks. WAPs are more common in larger, more complex networks.
In this lab, you will explore some integrated wireless routers and Cisco WAPs. You will access online emulators for some of Linksys routers and Cisco WAPs. The emulators imitate the configuration screens for the Linksys routers and Cisco WAPs.
Required Resources
Device with Internet access
Part 1: Explore Integrated Wireless Routers
Integrated wireless routers usually perform the functions of the following devices:
- a switch by connecting wired devices
- an access point by connecting wireless devices
- a router/gateway by providing access to the Internet through a modem to the ISP
Currently there are many different broadcast standards for wireless routers:
- 802.11b
- 802.11g
- 802.11n
- 802.11ac
The differences between these standards are speed and signal strength. In addition to the standards, each integrated wireless router may have features that meet your network requirement, such as content filtering, QoS, IPv6 support, and wireless security.
In Part 1, you will search the Internet for three different wireless routers and create a list of the important router feature by recording them in the following table. During your search, you can also record additional features that are important to you in the Other Features column in the table.
To explore emulators for some of the Linksys routers, go to http://ui.linksys.com/files/.
Note: The Linksys emulators may not provide the most current version of the firmware.
Lab – Investigating Wireless Implementations
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 3
Brand/Model Price
IPv6-
Enabled
Wireless
Security Band Other Features
Linksys/EA4500 $129.99 USD Yes WPA2 Dual-band N (2.4 GHz and 5 GHz)
Separate Guest Network, 4 Gigabit Ethernet Ports, QoS, remote administration from mobile devices, such as smart phones
After you have completed the table above, determine which integrated wireless router you would choose for your home. Explain your choice.
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Answer will vary. Some of the reasons can include ease of configuration, parental control, and QoS.
Part 2: Explore Wireless Access Points
Unlike integrated wireless routers, a WAP does not have integrated switch and router functions. A WAP only allows users to access the network wirelessly using mobile devices and provides a connection to the main wired network infrastructure. With the correct user credentials, wireless users can access resources on the network.
In this part, you will explore two Cisco WAPs, WAP321 and AP541N. Cisco’s website (http://www.cisco.com) can provide you with technical specifications regarding these WAPs. Furthermore, online emulators are also available at the following links:
To access an online WAP321 emulator, go to https://www.cisco.com/assets/sol/sb/WAP321_Emulators/WAP321_Emulator_v1.0.2.3/main.html.
To access an online AP541N emulator, go to http://www.cisco.com/assets/sol/sb/AP541N_Emulators/AP541N_Emulator_v1.9.2/Getting_Started.htm.
Lab – Investigating Wireless Implementations
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 3
Model Security Band Other Features / Comments
WAP321
AP541N
Reflection
What features on the wireless routers or WAPs are important for your network? Why?
_______________________________________________________________________________________
_______________________________________________________________________________________
Answer will vary. For example, wireless security is important because unauthorized wireless access to the network can have devastating consequences, such as loss of confidential company information.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 17
Lab – Configuring a Wireless Router and Client (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Linksys Router Settings
Network Name (SSID) CCNA-Net
Network Password cisconet
Router Password cisco123
Objectives
Part 1: Configure Basic Settings on a Linksys EA Series Router
Part 2: Secure the Wireless Network
Part 3: Review Additional Features on a Linksys EA Series Router
Part 4: Connect a Wireless Client
Background / Scenario
Surfing the web from anywhere in the home or office has become common. Without wireless connectivity, users would be limited to connect only where there is a wired connection. Users have embraced the flexibility that wireless routers provide for accessing the network and the Internet.
In this lab, you will configure a Linksys Smart Wi-Fi router, which includes applying WPA2 security settings and activating DHCP services. You will review some added features available on these routers, such as USB storage, parental controls, and time restrictions. You will also configure a wireless PC client.
Required Resources
1 Linksys EA Series Router (EA4500 with firmware version 2.1.39.145204 or comparable)
1 Cable or DSL modem (Optional - needed for Internet service and normally supplied by ISP)
1 PC with a Wireless NIC (Windows 7, Vista, or XP)
Ethernet cables as shown in the topology
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 17
Part 1: Configure Basic Settings on a Linksys EA Series Router
The most efficient way to configure basic settings on an EA Series router is to run the Linksys EA Series Setup CD that came with the router. If the Setup CD is unavailable, download the Setup program from http://Linksys.com/support.
Step 1: Insert the Linksys EA-Series Setup CD into the PC.
When prompted, select Set up your Linksys Router. You will be asked to read and accept the License Terms for using the software. Click Next > after accepting the license terms.
Step 2: Cable the network as shown in the topology.
Follow the directions in the next window for connecting the power cable and Ethernet cable from your cable modem or DSL modem. You may connect the PC to one of the four unused Ethernet ports on the back of the router. After you have connected everything, click Next >.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 17
Step 3: Configure Linksys router settings.
a. Allow time for the Linksys router settings window to display. Use the Linksys Router Settings table at the beginning of this lab to fill in the fields in this window. Click Next to display the summary router settings screen. Click Next.
b. The Create your Linksys Smart Wi-Fi account window displays. A Linksys Smart Wi-Fi account associates your router to the account, allowing you to remotely manage the router using a browser or
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 17
mobile device running the Smart Wi-Fi app. For this lab, bypass the account setup process. Click the No thanks box and press Continue.
Note: An account can be setup by browsing to www.linksyssmartwifi.com.
c. A Sign In window displays. In the Access Router field, enter cisco123, and click Sign In.
d. On the Linksys Smart Wi-Fi home page, click Connectivity to view and change basic router settings.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 17
e. On the Basic tab, you can edit the SSID name and password, change the router password, perform firmware updates, and set the time zone for your router. (The router password and SSID information was set in Step 3a.) Select the correct time zone for your router from the drop-down box and click Apply.
f. The Internet Settings tab provides information about the Internet connection. In the example, the router automatically configured the connection for DHCP. Both IPv4 and IPv6 information can be displayed from this screen.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 17
g. The Local Network tab controls the local DHCP server settings. The default local network settings specify the 192.168.1.0/24 network and the local IP address of the default router is 192.168.1.1. This can be changed by clicking Edit next to Router Details. DHCP Server settings can be changed on this screen. You can set the DHCP starting address, maximum number of DHCP users, client lease time, and static DNS servers. Click Apply to accept all changes made on this screen.
Note: If DHCP is used to obtain ISP connection information, these DNS addresses will most likely be populated with the ISP’s DNS server information.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 17
h. The Advanced Routing tab allows you to disable Network Address translation (NAT), which is enabled by default. This screen also allows you to add static routes. Click Apply to accept any desired changes made on this screen.
i. The Administration tab provides controls for the management of the Smart Wi-Fi software. By chicking the appropriate box, you can activate remote management access to the router. You can also activate HTTPS access and restrict wireless management. Universal Plug and Play (UPnP) and Application Layer Gateway controls are also available on this screen. Click Apply to accept any desired changes made on this screen.
Part 2: Secure the Wireless Network
In Part 2, you will secure the Linksys EA series router wireless network and review firewall and port forwarding options on a Linksys Smart Wi-Fi router.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 17
Step 1: Add WPA security on the wireless routers.
a. From the Linksys Smart Wi-Fi home page, click Wireless.
b. The Wireless window displays the settings for both the 2.4 and 5 GHz radios. Use the Edit button next to each column to modify the security setting on each wireless frequency range. (The SSID and password were previously set in Part 1.) Click the Security mode drop-down list to select the WPA2/WPA Mixed Personal option for each range. Click Apply to save your settings, and then click OK.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 17
Step 2: Apply firewall and port forwarding settings.
a. From the Linksys Smart Wi-Fi home page, click Security. In the Security windows, the Firewall, DMZ, and Apps and Gaming tabs are available to view and change router security settings.
b. The Firewall tab displays firewall settings, where you can enable or disable IPv4 and IPv6 Stateful Packet Inspection (SPI) firewall protection, Virtual Private Network (VPN) Passthrough options, and Internet filters. Click Apply to accept any desired changes made on this screen.
c. The Apps and Gaming tab provides port forwarding capabilities. In the example, ports 5060 and 5061 have been opened for a VoIP Softphone application running on a local device at IP address 192.168.1.126. Click Apply to accept any desired changes made on this screen.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 17
Part 3: Review Additional Features on a Linksys EA Series Router
In Part 3, you will review some of the additional features available on the Linksys EA series router.
Step 1: Review Smart Wi-Fi Tools.
a. From the Linksys Smart Wi-Fi home page, click Device List.
The Device List window displays the list of clients on the local network. Notice that there is a tab for the Guest Network. If the Guest network was activated, clients on that network would be displayed in the Guest Network tab.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 17
b. From the Linksys Smart Wi-Fi home page, click Guest Access. Clients on the guest network only have access to the Internet and are unable to access other clients on the local network. To allow guest access, click on the Allow guest access toggle button. Click Edit link (next to the Guest network name and password) to change the Guest network password and click OK to accept the changes.
c. From the Linksys Smart Wi-Fi home page, click Parental Controls. Use these settings to restrict Internet access on selected devices and to restrict time and websites. Click OK to save the settings.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 17
d. From the Linksys Smart Wi-Fi home page, click on Media Prioritization. These settings allows you to assign network bandwidth prioritization to selected devices on the local network. In the example, the device labeled Apple TV has been given the highest priority for network resources. To make prioritization changes, just drag and drop the listed devices, and click OK to save your settings.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 17
e. From the Linksys Smart Wi-Fi home page, click Speed Test. Use this utility to test your Internet access speeds. The example shows the results of the speed test. The router stores the results of each speed tests and allows you to display that history.
f. From the Linksys Smart Wi-Fi home page, click USB Storage. Use this screen to review your USB drive settings. From here, you can click on the appropriate tab to set up FTP and Media Servers. You can also set up individual user accounts for access to these servers by clicking the tabs at the top of this screen. A USB storage device is plugged into the back of the router to use this option. Click OK to save any desired changes.
Step 2: Troubleshoot the router.
From the Linksys Smart Wi-Fi home page, click Troubleshooting.
a. The Status tab provides a list of clients on the local network along with their NIC MAC and IP addresses. It also displays how they are connected to the network. Click OK to save any desired changes.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 17
b. The Diagnostics tab provides the ping and traceroute utilities. It also allows you to reboot the router, backup and restore the router configuration, restore a previous firmware version, release and renew the Internet addresses on your router, and reset to factory default settings. Click OK to save any desired changes.
c. The Logs tab provides Incoming and Outgoing, Security, and DHCP logs. You can print and clear these logs from this screen. Click OK to save any desired changes.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 17
Part 4: Connect a Wireless Client
In Part 4, you will configure the PC’s wireless NIC to connect to the Linksys EA Series Router.
Note: This lab was performed using a PC running the Windows 7 operating system. You should be able to perform the lab with other Windows operating systems listed; however, menu selections and screens may vary.
Step 1: Use the Network and Sharing Center.
a. Open the Network and Sharing Center by clicking the Windows Start button > Control Panel > View network status and tasks under Network and Internet heading in the Category View.
b. In the left pane, click the Change adapter settings link.
The Network Connections window provides the list of NICs available on this PC. Look for your Local Area Connection and Wireless Network Connection adapters in this window.
Note: VPN adapters and other types of network connections may also be displayed in this window.
Step 2: Work with your wireless NIC.
a. Select and right-click the Wireless Network Connection option to display a drop-down list. If your wireless NIC is disabled, you must Enable it.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 17
b. Right-click the Wireless Network Connection, and then click Connect/Disconnect. This displays a list of SSIDs in range of your wireless NIC. Select CCNA-Net, then click the Connect.
c. When prompted, enter cisconet to supply the network security key, and then click OK.
d. The wireless icon should display in your taskbar when you have a wireless connection. Click this icon to display the list of SSIDs in range of your PC.
Lab – Configuring a Wireless Router and Client
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 17
e. The SSID CCNA-Net should now show that you are connected to the CCNA-Net wireless network.
Reflection
Why would you not want to use WEP security for your wireless network?
_______________________________________________________________________________________
WEP uses RC4 encryption, which can be easily hacked. WPA2 use Advanced Encryption Standard (AES), which is considered the strongest encryption protocol.
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 4
Inside and Outside Control (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Explain how wireless LAN components are deployed in a small- to medium-sized business.
Instructor Notes: This activity can be completed individually, in small groups, or as a class.
Scenario
An assessment has been completed to validate the need for an upgrade to your small- to medium-sized wireless network. Approved for purchase are indoor and outdoor access points and one wireless controller. You must compare equipment models and their specifications before you purchase.
Therefore, you visit the Wireless Compare Products and Services web site and see a features chart for indoor and outdoor wireless access points and controller devices. After reviewing the chart, you note there is some terminology with which you are unfamiliar:
• Federal Information Processing Standard (FIPS)
• MIMO
• Cisco CleanAir Technology
• Cisco FlexConnect
• Band Select
Research the above terms. Prepare your own chart with your company’s most important requirements listed for purchasing the indoor and outdoor wireless access points and wireless controller. This chart will assist in validating your purchase order to your accounting manager and CEO.
Resources
Internet access to the World Wide Web
Part 1: Secure Background Knowledge of Wireless Terminology
Step 1: Define unfamiliar wireless terms.
a. FIPS
b. MIMO
c. Cisco CleanAir Technology
d. Cisco FlexConnect
e. Band Select
Step 2: Visit the Wireless Compare Products and Services web site.
a. Compare the devices in each category based on their feature sets.
b. Choose one model from each category: indoor, outdoor, and controller categories for the upgrades for your business.
Step 3: Create a chart for each device chosen in Step 2b to include:
a. The main type of selected device (indoor access point, outdoor access point, or controller).
Inside and Outside Control
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 4
b. A graphic of each selected device.
c. Five of the most beneficial features that the selected models would provide your business.
Step 4: After research is complete, explain, and justify your choices with another student,
class group, or entire class.
Suggested Activity Completion Examples
Part 1:
Wireless device features definitions
FIPS FIPS is the Federal Information Processing Standard regarding security for wireless
devices.
MIMO
Unlike SISO (Single Input, Single Output), MIMO technology uses multiple radio
bands and paths to transfer network data through multiple signals. Multiple antennas
are used to send multiple spatial streams at the same time allowing for higher data
transmission speeds and data delivery payloads.
Cisco CleanAir
Technology
CleanAir Technology allows Cisco devices to:
provide continual, system-wide wireless network discovery without wireless
performance impact
identify source, location and interference of wireless signals
take automatic steps to avoid current and future wireless interference while
recording what steps were taken to do so
Cisco
FlexConnect
FlexConnect (previously known as Hybrid Remote Edge Access Point or H-REAP) is
a wireless solution which enables network administrators to configure and control
access points located at remote locations. This is performed by using a local
wireless controller through a WAN connection.
Band Select
Band Select is a Cisco-selected frequency range technology based upon the ISM
(industrial, scientific, and medical) unlicensed usage. These include:
900 MHz
2.4 GHz (802.11b, g, and n standards) – better range but lower data rates
5 GHz (802.11a, n, and ac standards) – less range but higher data rates
Inside and Outside Control
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 4
Part 2:
Cisco 2600 Series Indoor Access Point
Wi-Fi Standards 802.11 a, b, g, n
(supports Dual paths/radio rates of 2.4 and 5 GHz)
Data rate capabilities of 450 Mbps
FIPS In process
CleanAir Technology Yes
FlexConnect Yes
Antennas Internal and external
Cisco 1552I Series Outdoor Access Point
Wi-Fi Standards 802.11 a, b, g, n
(supports Dual paths/radio rates of 2.4 and 5 GHz)
Data rate capabilities of 300 Mbps downstream with 10/100/1000 Mbps upstream
Inside and Outside Control
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 4
FIPS In process
CleanAir Technology Yes
FlexConnect Yes
Antennas Internal
Cisco Wireless Controller Module for ISR G2
Data Throughput 500 Mbps
Wireless Guest Services Yes (up to 500 clients supported by 50 APs)
16 WLANs supported with 16 maximum VLANs allowed
CleanAir Technology Yes
FlexConnect Yes
Access Control Lists (ACLs for security) Yes
Identify elements of the model that map to IT-related content:
Wireless terminology
Inside and outside wireless access points
Wireless controllers
Wireless device capabilities
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 2
DR and BDR Elections (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
Modify the OSPF interface priority to influence the Designated Router (DR) and Backup Designated Router (BDR) election.
The purpose of this activity is to simulate how designated and backup designated routers are selected for an OSPF area.
Scenario
You are trying to decide how to influence the selection of the designated router and backup designated router for
your OSPF network. This activity simulates that process.
Three separate designated-router election scenarios will be presented. The focus is on electing a DR and BDR for
your group. Refer to the PDF for this activity for the remaining instructions.
If additional time is available, two groups can be combined to simulate DR and BDR elections.
Required Resources
Router priorities paper sign example (student developed)
Router ID paper sign example (student developed)
Directions
This is a group activity with four classmates comprising each group. Before reporting to the group, each student will prepare router priority and router ID signs to bring to the group.
Step 1: Decide the router priority.
a. Prior to joining your group, use a clean sheet of paper. On one side of the paper, write DEFAULT ROUTER PRIORITY = 1.
b. On the other side of the same sheet of paper, write ROUTER PRIORITY = (choose a number between 0 and 255).
Step 2: Decide the router ID.
a. On a second clean sheet of paper, on one side, write ROUTER ID = (any IPv4 number).
b. On the other side, write ROUTER ID = Loopback (any IPv4) number.
Step 3: Begin DR and BDR elections.
a. Start the first election process.
1) Students within the group will show each other the router priority numbers they selected for Step 1b.
2) After comparing their priority numbers, the student with the highest priority number is elected the DR and the student with the second-highest priority number is elected the BDR. Any student, who wrote 0 as their priority number, cannot participate in the election.
DR and BDR Elections
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 2
3) The elected DR student will announce the elections by saying “I am the DR for all of you in this group. Please send me any changes to your networks or interfaces to IP address 224.0.0.6. I will then forward those changes to all of you at IP address 224.0.0.5. Stay tuned for future updates.”
4) The BDR’s elected student will say, “I am your BDR. Please send all changes to your router interfaces or networks to the DR. If the DR does not announce your changes, I will step in and do that from that point onward.”
b. Start the second election process.
1) Students will hold up their DEFAULT ROUTER PRIORITY = 1 sign first. When it is agreed that all of the students have the same router priority, they will put that paper down.
2) Next, students will display their ROUTER ID = Loopback (IPv4) address signs.
3) The student with the highest loopback IPv4 address wins the election and repeats “I am the DR for all of you in this group. Our priorities are the same, but I have the highest loopback address on my router as compared to all of you; therefore, you have elected me as your DR. Please send all changes to your network addresses or interfaces to 224.0.0.6. I will then report any changes to all of you via 224.0.0.5.”
4) The BDR will repeat his/her respective phrase from Step 3a,4).
c. Start the third election process, but this time, all students can choose which sides of their papers to display. The DR/BDR election process uses the highest router priority first, highest loopback router ID second, and highest IPv4 router ID third, and elects a DR and BDR.
1) Elect a DR and BDR.
2) Justify your elections.
3) If you have time, get together with another group and go through the scenario processes again to solidify DR and BDR elections.
Identify elements of the model that map to IT-related content:
Designated router
Backup designated router
Multicast 224.0.0.6
Multicast 224.0.0.5
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 29
Lab - Configuring Basic Single-Area OSPFv2 (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 29
Addressing Table
Device Interface IP Address Subnet Mask Default Gateway
R1 G0/0 192.168.1.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.12.1 255.255.255.252 N/A
S0/0/1 192.168.13.1 255.255.255.252 N/A
R2 G0/0 192.168.2.1 255.255.255.0 N/A
S0/0/0 192.168.12.2 255.255.255.252 N/A
S0/0/1 (DCE) 192.168.23.1 255.255.255.252 N/A
R3 G0/0 192.168.3.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.13.2 255.255.255.252 N/A
S0/0/1 192.168.23.2 255.255.255.252 N/A
PC-A NIC 192.168.1.3 255.255.255.0 192.168.1.1
PC-B NIC 192.168.2.3 255.255.255.0 192.168.2.1
PC-C NIC 192.168.3.3 255.255.255.0 192.168.3.1
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Configure and Verify OSPF Routing
Part 3: Change Router ID Assignments
Part 4: Configure OSPF Passive Interfaces
Part 5: Change OSPF Metrics
Background / Scenario
Open Shortest Path First (OSPF) is a link-state routing protocol for IP networks. OSPFv2 is defined for IPv4 networks, and OSPFv3 is defined for IPv6 networks. OSPF detects changes in the topology, such as link failures, and converges on a new loop-free routing structure very quickly. It computes each route using Dijkstra’s algorithm, a shortest path first algorithm.
In this lab, you will configure the network topology with OSPFv2 routing, change the router ID assignments, configure passive interfaces, adjust OSPF metrics, and use a number of CLI commands to display and verify OSPF routing information.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 29
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet and serial cables as shown in the topology
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you set up the network topology and configure basic settings on the PC hosts and routers.
Step 1: Cable the network as shown in the topology.
Step 2: Initialize and reload the routers as necessary.
Step 3: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure device name as shown in the topology.
c. Assign class as the privileged EXEC password.
d. Assign cisco as the console and vty passwords.
e. Configure a message of the day (MOTD) banner to warn users that unauthorized access is prohibited.
f. Configure logging synchronous for the console line.
g. Configure the IP address listed in the Addressing Table for all interfaces.
h. Set the clock rate for all DCE serial interfaces at 128000.
i. Copy the running configuration to the startup configuration.
Step 4: Configure PC hosts.
Step 5: Test connectivity.
The routers should be able to ping one another, and each PC should be able to ping its default gateway. The PCs are unable to ping other PCs until OSPF routing is configured. Verify and troubleshoot if necessary.
Part 2: Configure and Verify OSPF Routing
In Part 2, you will configure OSPFv2 routing on all routers in the network and then verify that routing tables are updated correctly. After OSPF has been verified, you will configure OSPF authentication on the links for added security.
Step 1: Configure OSPF on R1.
a. Use the router ospf command in global configuration mode to enable OSPF on R1.
R1(config)# router ospf 1
Note: The OSPF process id is kept locally and has no meaning to other routers on the network.
b. Configure the network statements for the networks on R1. Use an area ID of 0.
R1(config-router)# network 192.168.1.0 0.0.0.255 area 0
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 29
R1(config-router)# network 192.168.12.0 0.0.0.3 area 0
R1(config-router)# network 192.168.13.0 0.0.0.3 area 0
Step 2: Configure OSPF on R2 and R3.
Use the router ospf command and add the network statements for the networks on R2 and R3. Neighbor adjacency messages display on R1 when OSPF routing is configured on R2 and R3.
R1#
00:22:29: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.23.1 on Serial0/0/0 from LOADING to
FULL, Loading Done
R1#
00:23:14: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.23.2 on Serial0/0/1 from LOADING to
FULL, Loading Done
R1#
Step 3: Verify OSPF neighbors and routing information.
a. Issue the show ip ospf neighbor command to verify that each router lists the other routers in the network as neighbors.
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
192.168.23.2 0 FULL/ - 00:00:33 192.168.13.2 Serial0/0/1
192.168.23.1 0 FULL/ - 00:00:30 192.168.12.2 Serial0/0/0
b. Issue the show ip route command to verify that all networks display in the routing table on all routers.
R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, GigabitEthernet0/0
L 192.168.1.1/32 is directly connected, GigabitEthernet0/0
O 192.168.2.0/24 [110/65] via 192.168.12.2, 00:32:33, Serial0/0/0
O 192.168.3.0/24 [110/65] via 192.168.13.2, 00:31:48, Serial0/0/1
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/30 is directly connected, Serial0/0/0
L 192.168.12.1/32 is directly connected, Serial0/0/0
192.168.13.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.13.0/30 is directly connected, Serial0/0/1
L 192.168.13.1/32 is directly connected, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0/30 [110/128] via 192.168.12.2, 00:31:38, Serial0/0/0
[110/128] via 192.168.13.2, 00:31:38, Serial0/0/1
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 29
What command would you use to only see the OSPF routes in the routing table?
_______________________________________________________________________________________
show ip route ospf
Step 4: Verify OSPF protocol settings.
The show ip protocols command is a quick way to verify vital OSPF configuration information. This information includes the OSPF process ID, the router ID, networks the router is advertising, the neighbors the router is receiving updates from, and the default administrative distance, which is 110 for OSPF.
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 192.168.13.1
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.1.0 0.0.0.255 area 0
192.168.12.0 0.0.0.3 area 0
192.168.13.0 0.0.0.3 area 0
Routing Information Sources:
Gateway Distance Last Update
192.168.23.2 110 00:19:16
192.168.23.1 110 00:20:03
Distance: (default is 110)
Step 5: Verify OSPF process information.
Use the show ip ospf command to examine the OSPF process ID and router ID. This command displays the OSPF area information, as well as the last time the SPF algorithm was calculated.
R1# show ip ospf
Routing Process "ospf 1" with ID 192.168.13.1
Start time: 00:20:23.260, Time elapsed: 00:25:08.296
Supports only single TOS(TOS0) routes
Supports opaque LSA
Supports Link-local Signaling (LLS)
Supports area transit capability
Supports NSSA (compatible with RFC 3101)
Event-log enabled, Maximum number of events: 1000, Mode: cyclic
Router is not originating router-LSAs with maximum metric
Initial SPF schedule delay 5000 msecs
Minimum hold time between two consecutive SPFs 10000 msecs
Maximum wait time between two consecutive SPFs 10000 msecs
Incremental-SPF disabled
Minimum LSA interval 5 secs
Minimum LSA arrival 1000 msecs
LSA group pacing timer 240 secs
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 29
Interface flood pacing timer 33 msecs
Retransmission pacing timer 66 msecs
Number of external LSA 0. Checksum Sum 0x000000
Number of opaque AS LSA 0. Checksum Sum 0x000000
Number of DCbitless external and opaque AS LSA 0
Number of DoNotAge external and opaque AS LSA 0
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Number of areas transit capable is 0
External flood list length 0
IETF NSF helper support enabled
Cisco NSF helper support enabled
Reference bandwidth unit is 100 mbps
Area BACKBONE(0)
Number of interfaces in this area is 3
Area has no authentication
SPF algorithm last executed 00:22:53.756 ago
SPF algorithm executed 7 times
Area ranges are
Number of LSA 3. Checksum Sum 0x019A61
Number of opaque link LSA 0. Checksum Sum 0x000000
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
Step 6: Verify OSPF interface settings.
a. Issue the show ip ospf interface brief command to display a summary of OSPF-enabled interfaces.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/1 1 0 192.168.13.1/30 64 P2P 1/1
Se0/0/0 1 0 192.168.12.1/30 64 P2P 1/1
Gi0/0 1 0 192.168.1.1/24 1 DR 0/0
b. For a more detailed list of every OSPF-enabled interface, issue the show ip ospf interface command.
R1# show ip ospf interface
Serial0/0/1 is up, line protocol is up
Internet Address 192.168.13.1/30, Area 0, Attached via Network Statement
Process ID 1, Router ID 192.168.13.1, Network Type POINT_TO_POINT, Cost: 64
Topology-MTID Cost Disabled Shutdown Topology Name
0 64 no no Base
Transmit Delay is 1 sec, State POINT_TO_POINT
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:01
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 3/3, flood queue length 0
Next 0x0(0)/0x0(0)
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 29
Last flood scan length is 1, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 192.168.23.2
Suppress hello for 0 neighbor(s)
Serial0/0/0 is up, line protocol is up
Internet Address 192.168.12.1/30, Area 0, Attached via Network Statement
Process ID 1, Router ID 192.168.13.1, Network Type POINT_TO_POINT, Cost: 64
Topology-MTID Cost Disabled Shutdown Topology Name
0 64 no no Base
Transmit Delay is 1 sec, State POINT_TO_POINT
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:03
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 2/2, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 1, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 192.168.23.1
Suppress hello for 0 neighbor(s)
GigabitEthernet0/0 is up, line protocol is up
Internet Address 192.168.1.1/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 192.168.13.1, Network Type BROADCAST, Cost: 1
Topology-MTID Cost Disabled Shutdown Topology Name
0 1 no no Base
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 192.168.13.1, Interface address 192.168.1.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:01
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
Step 7: Verify end-to-end connectivity.
Each PC should be able to ping the other PCs in the topology. Verify and troubleshoot if necessary.
Note: It may be necessary to disable the PC firewall to ping between PCs.
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 29
Part 3: Change Router ID Assignments
The OSPF router ID is used to uniquely identify the router in the OSPF routing domain. Cisco routers derive the router ID in one of three ways and with the following precedence:
1) IP address configured with the OSPF router-id command, if present
2) Highest IP address of any of the router’s loopback addresses, if present
3) Highest active IP address on any of the router’s physical interfaces
Because no router IDs or loopback interfaces have been configured on the three routers, the router ID for each router is determined by the highest IP address of any active interface.
In Part 3, you will change the OSPF router ID assignment using loopback addresses. You will also use the router-id command to change the router ID.
Step 1: Change router IDs using loopback addresses.
a. Assign an IP address to loopback 0 on R1.
R1(config)# interface lo0
R1(config-if)# ip address 1.1.1.1 255.255.255.255
R1(config-if)# end
b. Assign IP addresses to Loopback 0 on R2 and R3. Use IP address 2.2.2.2/32 for R2 and 3.3.3.3/32 for R3.
c. Save the running configuration to the startup configuration on all three routers.
d. You must reload the routers in order to reset the router ID to the loopback address. Issue the reload command on all three routers. Press Enter to confirm the reload.
Instructor Note: The clear ip ospf process command does not reset the router IDs with the loopback address. Reloading the router will reset the router ID to the loopback address.
e. After the router completes the reload process, issue the show ip protocols command to view the new router ID.
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 1.1.1.1
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.1.0 0.0.0.255 area 0
192.168.12.0 0.0.0.3 area 0
192.168.13.0 0.0.0.3 area 0
Routing Information Sources:
Gateway Distance Last Update
3.3.3.3 110 00:01:00
2.2.2.2 110 00:01:14
Distance: (default is 110)
f. Issue the show ip ospf neighbor command to display the router ID changes for the neighboring routers.
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 29
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
3.3.3.3 0 FULL/ - 00:00:35 192.168.13.2 Serial0/0/1
2.2.2.2 0 FULL/ - 00:00:32 192.168.12.2 Serial0/0/0
R1#
Step 2: Change the router ID on R1 using the router-id command.
The preferred method for setting the router ID is with the router-id command.
a. Issue the router-id 11.11.11.11 command on R1 to reassign the router ID. Notice the informational message that appears when issuing the router-id command.
R1(config)# router ospf 1
R1(config-router)# router-id 11.11.11.11
Reload or use "clear ip ospf process" command, for this to take effect
R1(config)# end
b. You will receive an informational message telling you that you must either reload the router or use the clear ip ospf process command for the change to take effect. Issue the clear ip ospf process command on all three routers. Type yes to reply to the reset verification message, and press ENTER.
c. Set the router ID for R2 to 22.22.22.22 and the router ID for R3 to 33.33.33.33. Then use clear ip ospf process command to reset ospf routing process.
d. Issue the show ip protocols command to verify that the router ID changed on R1.
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 11.11.11.11
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.1.0 0.0.0.255 area 0
192.168.12.0 0.0.0.3 area 0
192.168.13.0 0.0.0.3 area 0
Passive Interface(s):
GigabitEthernet0/1
Routing Information Sources:
Gateway Distance Last Update
33.33.33.33 110 00:00:19
22.22.22.22 110 00:00:31
3.3.3.3 110 00:00:41
2.2.2.2 110 00:00:41
Distance: (default is 110)
e. Issue the show ip ospf neighbor command on R1 to verify that new router ID for R2 and R3 is listed.
R1# show ip ospf neighbor
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 29
Neighbor ID Pri State Dead Time Address Interface
33.33.33.33 0 FULL/ - 00:00:36 192.168.13.2 Serial0/0/1
22.22.22.22 0 FULL/ - 00:00:32 192.168.12.2 Serial0/0/0
Part 4: Configure OSPF Passive Interfaces
The passive-interface command prevents routing updates from being sent through the specified router interface. This is commonly done to reduce traffic on the LANs as they do not need to receive dynamic routing protocol communication. In Part 4, you will use the passive-interface command to configure a single interface as passive. You will also configure OSPF so that all interfaces on the router are passive by default, and then enable OSPF routing advertisements on selected interfaces.
Step 1: Configure a passive interface.
a. Issue the show ip ospf interface g0/0 command on R1. Notice the timer indicating when the next Hello packet is expected. Hello packets are sent every 10 seconds and are used between OSPF routers to verify that their neighbors are up.
R1# show ip ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Internet Address 192.168.1.1/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 11.11.11.11, Network Type BROADCAST, Cost: 1
Topology-MTID Cost Disabled Shutdown Topology Name
0 1 no no Base
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 11.11.11.11, Interface address 192.168.1.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:02
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
b. Issue the passive-interface command to change the G0/0 interface on R1 to passive.
R1(config)# router ospf 1
R1(config-router)# passive-interface g0/0
c. Re-issue the show ip ospf interface g0/0 command to verify that G0/0 is now passive.
R1# show ip ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Internet Address 192.168.1.1/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 11.11.11.11, Network Type BROADCAST, Cost: 1
Topology-MTID Cost Disabled Shutdown Topology Name
0 1 no no Base
Transmit Delay is 1 sec, State DR, Priority 1
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 29
Designated Router (ID) 11.11.11.11, Interface address 192.168.1.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
No Hellos (Passive interface)
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
d. Issue the show ip route command on R2 and R3 to verify that a route to the 192.168.1.0/24 network is still available.
R2# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
2.0.0.0/32 is subnetted, 1 subnets
C 2.2.2.2 is directly connected, Loopback0
O 192.168.1.0/24 [110/65] via 192.168.12.1, 00:58:32, Serial0/0/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, GigabitEthernet0/0
L 192.168.2.1/32 is directly connected, GigabitEthernet0/0
O 192.168.3.0/24 [110/65] via 192.168.23.2, 00:58:19, Serial0/0/1
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/30 is directly connected, Serial0/0/0
L 192.168.12.2/32 is directly connected, Serial0/0/0
192.168.13.0/30 is subnetted, 1 subnets
O 192.168.13.0 [110/128] via 192.168.23.2, 00:58:19, Serial0/0/1
[110/128] via 192.168.12.1, 00:58:32, Serial0/0/0
192.168.23.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.23.0/30 is directly connected, Serial0/0/1
L 192.168.23.1/32 is directly connected, Serial0/0/1
Step 2: Set passive interface as the default on a router.
a. Issue the show ip ospf neighbor command on R1 to verify that R2 is listed as an OSPF neighbor.
R1# show ip ospf neighbor
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 29
Neighbor ID Pri State Dead Time Address Interface
33.33.33.33 0 FULL/ - 00:00:31 192.168.13.2 Serial0/0/1
22.22.22.22 0 FULL/ - 00:00:32 192.168.12.2 Serial0/0/0
b. Issue the passive-interface default command on R2 to set the default for all OSPF interfaces as passive.
R2(config)# router ospf 1
R2(config-router)# passive-interface default
R2(config-router)#
*Apr 3 00:03:00.979: %OSPF-5-ADJCHG: Process 1, Nbr 11.11.11.11 on Serial0/0/0 from
FULL to DOWN, Neighbor Down: Interface down or detached
*Apr 3 00:03:00.979: %OSPF-5-ADJCHG: Process 1, Nbr 33.33.33.33 on Serial0/0/1 from
FULL to DOWN, Neighbor Down: Interface down or detached
c. Re-issue the show ip ospf neighbor command on R1. After the dead timer expires, R2 will no longer be listed as an OSPF neighbor.
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
33.33.33.33 0 FULL/ - 00:00:34 192.168.13.2 Serial0/0/1
d. Issue the show ip ospf interface S0/0/0 command on R2 to view the OSPF status of interface S0/0/0.
R2# show ip ospf interface s0/0/0
Serial0/0/0 is up, line protocol is up
Internet Address 192.168.12.2/30, Area 0, Attached via Network Statement
Process ID 1, Router ID 22.22.22.22, Network Type POINT_TO_POINT, Cost: 64
Topology-MTID Cost Disabled Shutdown Topology Name
0 64 no no Base
Transmit Delay is 1 sec, State POINT_TO_POINT
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
No Hellos (Passive interface)
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 2/2, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
e. If all interfaces on R2 are passive, then no routing information is being advertised. In this case, R1 and R3 should no longer have a route to the 192.168.2.0/24 network. You can verify this by using the show ip route command.
f. On R2, issue the no passive-interface command so the router will send and receive OSPF routing updates. After entering this command, you will see an informational message that a neighbor adjacency has been established with R1.
R2(config)# router ospf 1
R2(config-router)# no passive-interface s0/0/0
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 29
R2(config-router)#
*Apr 3 00:18:03.463: %OSPF-5-ADJCHG: Process 1, Nbr 11.11.11.11 on Serial0/0/0 from
LOADING to FULL, Loading Done
g. Re-issue the show ip route and show ip ospf neighbor commands on R1 and R3, and look for a route to the 192.168.2.0/24 network.
R1:
O 192.168.2.0/24 [110/65] via 192.168.12.2, 00:00:24, Serial0/0/0
R3:
O 192.168.2.0/24 [110/129] via 192.168.13.1, 00:00:04, Serial0/0/0
What interface is R3 using to route to the 192.168.2.0/24 network? ____________ S0/0/0
What is the accumulated cost metric for the 192.168.2.0/24 network on R3? _________ 129
Does R2 show up as an OSPF neighbor on R1? ________ Yes
Does R2 show up as an OSPF neighbor on R3? ________ No
What does this information tell you?
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Answers will vary, but all traffic to the 192.168.2.0/24 network from R3 will be routed through R1. The S0/0/1 interface on R2 is still configured as a passive interface, so OSPF routing information is not being advertised across this interface. The 129 accumulated cost results from the fact that traffic from R3 to the 192.168.2.0/24 network must pass through two T1 (1.544 Mb/s) serial links (at a cost of 64 each) plus the R2 Gigabit 0/0 LAN link (at a cost of 1).
h. Change interface S0/0/1 on R2 to allow it to advertise OSPF routes. Record the commands used below.
____________________________________________________________________________________
____________________________________________________________________________________
R2(config)# router ospf 1
R2(config-router)# no passive-interface s0/0/1
i. Re-issue the show ip route command on R3.
O 192.168.2.0/24 [110/65] via 192.168.23.1, 00:00:00, Serial0/0/1
What interface is R3 using to route to the 192.168.2.0/24 network? ____________ S0/0/1
What is the accumulated cost metric for the 192.168.2.0/24 network on R3 now and how is this calculated?
____________________________________________________________________________________
65 (One T1 (1.544 Mb/s) serial link (at a cost of 64) plus the R2 Gigabit 0/0 LAN link (at a cost of 1)).
Is R2 listed as an OSPF neighbor to R3? ________ Yes
Part 5: Change OSPF Metrics
In Part 5, you will change OSPF metrics using the auto-cost reference-bandwidth command, the bandwidth command, and the ip ospf cost command.
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 29
Note: All DCE interfaces should have been configured with a clocking rate of 128000 in Part 1.
Step 1: Change the reference bandwidth on the routers.
The default reference-bandwidth for OSPF is 100Mb/s (Fast Ethernet speed). However, most modern infrastructure devices have links that are faster than 100Mb/s. Because the OSPF cost metric must be an integer, all links with transmission speeds of 100Mb/s or higher have a cost of 1. This results in Fast Ethernet, Gigabit Ethernet, and 10G Ethernet interfaces all having the same cost. Therefore, the reference-bandwidth must be changed to a higher value to accommodate networks with links faster that 100Mb/s.
a. Issue the show interface command on R1 to view the default bandwidth setting for the G0/0 interface.
R1# show interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is c471.fe45.7520 (bia c471.fe45.7520)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 100Mbps, media type is RJ45
output flow-control is unsupported, input flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 00:17:31, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
279 packets output, 89865 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
1 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
Note: The bandwidth setting on G0/0 may differ from what is shown above if the PC host interface can only support Fast Ethernet speed. If the PC host interface is not capable of supporting gigabit speed, then the bandwidth will most likely be displayed as 100000 Kbit/sec.
b. Issue the show ip route ospf command on R1 to determine the route to the 192.168.3.0/24 network.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 29
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.2.0/24 [110/65] via 192.168.12.2, 00:01:08, Serial0/0/0
O 192.168.3.0/24 [110/65] via 192.168.13.2, 00:00:57, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/128] via 192.168.13.2, 00:00:57, Serial0/0/1
[110/128] via 192.168.12.2, 00:01:08, Serial0/0/0
Note: The accumulated cost to the 192.168.3.0/24 network from R1 is 65.
c. Issue the show ip ospf interface command on R3 to determine the routing cost for G0/0.
R3# show ip ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Internet Address 192.168.3.1/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 3.3.3.3, Network Type BROADCAST, Cost: 1
Topology-MTID Cost Disabled Shutdown Topology Name
0 1 no no Base
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 192.168.23.2, Interface address 192.168.3.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:05
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
d. Issue the show ip ospf interface s0/0/1 command on R1 to view the routing cost for S0/0/1.
R1# show ip ospf interface s0/0/1
Serial0/0/1 is up, line protocol is up
Internet Address 192.168.13.1/30, Area 0, Attached via Network Statement
Process ID 1, Router ID 1.1.1.1, Network Type POINT_TO_POINT, Cost: 64
Topology-MTID Cost Disabled Shutdown Topology Name
0 64 no no Base
Transmit Delay is 1 sec, State POINT_TO_POINT
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:04
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 29
Index 3/3, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 1, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 192.168.23.2
Suppress hello for 0 neighbor(s)
The sum of the costs of these two interfaces is the accumulated cost for the route to the 192.168.3.0/24 network on R3 (1 + 64 = 65), as can be seen in the output from the show ip route command.
e. Issue the auto-cost reference-bandwidth 10000 command on R1 to change the default reference bandwidth setting. With this setting, 10Gb/s interfaces will have a cost of 1, 1 Gb/s interfaces will have a cost of 10, and 100Mb/s interfaces will have a cost of 100.
R1(config)# router ospf 1
R1(config-router)# auto-cost reference-bandwidth 10000
% OSPF: Reference bandwidth is changed.
Please ensure reference bandwidth is consistent across all routers.
f. Issue the auto-cost reference-bandwidth 10000 command on routers R2 and R3.
g. Re-issue the show ip ospf interface command to view the new cost of G0/0 on R3, and S0/0/1 on R1.
R3# show ip ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Internet Address 192.168.3.1/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 3.3.3.3, Network Type BROADCAST, Cost: 10
Topology-MTID Cost Disabled Shutdown Topology Name
0 10 no no Base
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 192.168.23.2, Interface address 192.168.3.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:02
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
Note: If the device connected to the G0/0 interface does not support Gigabit Ethernet speed, the cost will be different than the output display. For example, the cost will be 100 for Fast Ethernet speed (100Mb/s).
R1# show ip ospf interface s0/0/1
Serial0/0/1 is up, line protocol is up
Internet Address 192.168.13.1/30, Area 0, Attached via Network Statement
Process ID 1, Router ID 1.1.1.1, Network Type POINT_TO_POINT, Cost: 6476
Topology-MTID Cost Disabled Shutdown Topology Name
0 6476 no no Base
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 29
Transmit Delay is 1 sec, State POINT_TO_POINT
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:05
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 3/3, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 1, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 192.168.23.2
Suppress hello for 0 neighbor(s)
h. Re-issue the show ip route ospf command to view the new accumulated cost for the 192.168.3.0/24 route (10 + 6476 = 6486).
Note: If the device connected to the G0/0 interface does not support Gigabit Ethernet speed, the total cost will be different than the output display. For example, the accumulated cost will be 6576 if G0/0 is operating at Fast Ethernet speed (100Mb/s).
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.2.0/24 [110/6486] via 192.168.12.2, 00:05:40, Serial0/0/0
O 192.168.3.0/24 [110/6486] via 192.168.13.2, 00:01:08, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/12952] via 192.168.13.2, 00:05:17, Serial0/0/1
[110/12952] via 192.168.12.2, 00:05:17, Serial0/0/
Note: Changing the default reference-bandwidth on the routers from 100 to 10,000 in effect changed the accumulated costs of all routes by a factor of 100, but the cost of each interface link and route is now more accurately reflected.
i. To reset the reference-bandwidth back to its default value, issue the auto-cost reference-bandwidth 100 command on all three routers.
R1(config)# router ospf 1
R1(config-router)# auto-cost reference-bandwidth 100
% OSPF: Reference bandwidth is changed.
Please ensure reference bandwidth is consistent across all routers.
Why would you want to change the OSPF default reference-bandwidth?
_______________________________________________________________________________________
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 29
_______________________________________________________________________________________
Answers may vary, but today’s equipment supports link speeds that are faster than 100 Mb/s. To obtain a more accurate cost calculation for these faster links, a higher default reference-bandwidth setting is needed.
Step 2: Change the bandwidth for an interface.
On most serial links, the bandwidth metric will default to 1544 Kbits (that of a T1). If this is not the actual speed of the serial link, the bandwidth setting will need to be changed to match the actual speed to allow the route cost to be calculated correctly in OSPF. Use the bandwidth command to adjust the bandwidth setting on an interface.
Note: A common misconception is to assume that the bandwidth command will change the physical bandwidth, or speed, of the link. The command modifies the bandwidth metric used by OSPF to calculate routing costs, and does not modify the actual bandwidth (speed) of the link.
a. Issue the show interface s0/0/0 command on R1 to view the current bandwidth setting on S0/0/0. Even though the clock rate, link speed on this interface was set to 128Kb/s, the bandwidth is still showing 1544Kb/s.
R1# show interface s0/0/0
Serial0/0/0 is up, line protocol is up
Hardware is WIC MBRD Serial
Internet address is 192.168.12.1/30
MTU 1500 bytes, BW 1544 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation HDLC, loopback not set
Keepalive set (10 sec)
<Output omitted>
b. Issue the show ip route ospf command on R1 to view the accumulated cost for the route to network 192.168.23.0/24 using S0/0/0. Note that there are two equal-cost (128) routes to the 192.168.23.0/24 network, one via S0/0/0 and one via S0/0/1.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.2.0/24 [110/65] via 192.168.12.2, 00:00:26, Serial0/0/0
O 192.168.3.0/24 [110/65] via 192.168.13.2, 00:00:26, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/128] via 192.168.13.2, 00:00:26, Serial0/0/1
[110/128] via 192.168.12.2, 00:00:26, Serial0/0/0
c. Issue the bandwidth 128 command to set the bandwidth on S0/0/0 to 128Kb/s.
R1(config)# interface s0/0/0
R1(config-if)# bandwidth 128
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 29
d. Re-issue the show ip route ospf command. The routing table no longer displays the route to the 192.168.23.0/24 network over the S0/0/0 interface. This is because the best route, the one with the lowest cost, is now via S0/0/1.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.2.0/24 [110/129] via 192.168.12.2, 00:01:47, Serial0/0/0
O 192.168.3.0/24 [110/65] via 192.168.13.2, 00:04:51, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/128] via 192.168.13.2, 00:04:51, Serial0/0/1
e. Issue the show ip ospf interface brief command. The cost for S0/0/0 has changed from 64 to 781 which is an accurate cost representation of the link speed.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/1 1 0 192.168.13.1/30 64 P2P 1/1
Se0/0/0 1 0 192.168.12.1/30 781 P2P 1/1
Gi0/0 1 0 192.168.1.1/24 1 DR 0/0
f. Change the bandwidth for interface S0/0/1 to the same setting as S0/0/0 on R1.
R1(config)# interface s0/0/1
R1(config-if)# bandwidth 128
g. Re-issue the show ip route ospf command to view the accumulated cost of both routes to the 192.168.23.0/24 network. Note that there are again two equal-cost (845) routes to the 192.168.23.0/24 network, one via S0/0/0 and one via S0/0/1.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.2.0/24 [110/782] via 192.168.12.2, 00:00:09, Serial0/0/0
O 192.168.3.0/24 [110/782] via 192.168.13.2, 00:00:09, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 29
O 192.168.23.0 [110/845] via 192.168.13.2, 00:00:09, Serial0/0/1
[110/845] via 192.168.12.2, 00:00:09, Serial0/0/0
Explain how the costs to the 192.168.3.0/24 and 192.168.23.0/30 networks from R1 were calculated.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
The cost to 192.168.3.0/24: R1 S0/0/1 + R3 G0/0 (781+1=782). The cost to 192.168.23.0/30: R1 S0/0/1 and R3 S0/0/1 (781+64=845).
h. Issue the show ip route ospf command on R3. The accumulated cost of the 192.168.1.0/24 is still showing as 65. Unlike the clock rate command, the bandwidth command needs to be applied on each side of a serial link.
R3# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.1.0/24 [110/65] via 192.168.13.1, 00:30:58, Serial0/0/0
O 192.168.2.0/24 [110/65] via 192.168.23.1, 00:30:58, Serial0/0/1
192.168.12.0/30 is subnetted, 1 subnets
O 192.168.12.0 [110/128] via 192.168.23.1, 00:30:58, Serial0/0/1
[110/128] via 192.168.13.1, 00:30:58, Serial0/0/0
i. Issue the bandwidth 128 command on all remaining serial interfaces in the topology.
What is the new accumulated cost to the 192.168.23.0/24 network on R1? Why?
____________________________________________________________________________________
____________________________________________________________________________________
1,562. Each serial link now has a cost of 781, and the route to the 192.168.23.0/24 network travels over two serial links. 781 + 781 = 1,562.
Step 3: Change the route cost.
OSPF uses the bandwidth setting to calculate the cost for a link by default. However, you can override this calculation by manually setting the cost of a link using the ip ospf cost command. Like the bandwidth command, the ip ospf cost command only affects the side of the link where it was applied.
a. Issue the show ip route ospf on R1.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 29
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.2.0/24 [110/782] via 192.168.12.2, 00:00:26, Serial0/0/0
O 192.168.3.0/24 [110/782] via 192.168.13.2, 00:02:50, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/1562] via 192.168.13.2, 00:02:40, Serial0/0/1
[110/1562] via 192.168.12.2, 00:02:40, Serial0/0/0
b. Apply the ip ospf cost 1565 command to the S0/0/1 interface on R1. A cost of 1565 is higher than the accumulated cost of the route through R2 which is 1562.
R1(config)# interface s0/0/1
R1(config-if)# ip ospf cost 1565
c. Re-issue the show ip route ospf command on R1 to display the effect this change has made on the routing table. All OSPF routes for R1 are now being routed through R2.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.2.0/24 [110/782] via 192.168.12.2, 00:02:06, Serial0/0/0
O 192.168.3.0/24 [110/1563] via 192.168.12.2, 00:05:31, Serial0/0/0
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/1562] via 192.168.12.2, 01:14:02, Serial0/0/0
Note: Manipulating link costs using the ip ospf cost command is the easiest and preferred method for changing OSPF route costs. In addition to changing the cost based on bandwidth, a network administrator may have other reasons for changing the cost of a route, such as preference for a particular service provider or the actual monetary cost of a link or route.
Explain why the route to the 192.168.3.0/24 network on R1 is now going through R2?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
OSPF will choose the route with the least accumulated cost. The route with the lowest accumulated cost is: R1-S0/0/0 + R2-S0/0/1 + R3-G0/0, or 781 + 781 + 1 = 1,563. This metric is smaller than the accumulated cost of R1-S0/0/1 + R3-G0/0, or 1565 + 1 = 1,566.
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 29
Reflection
1. Why is it important to control the router ID assignment when using the OSPF protocol?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Router ID assignments control the Designated Router (DR) and Backup Designated Router (BDR) election process on a multi-access network. If the router ID is associated with an active interface, it can change if the interface goes down. For this reason it should be set using the IP address of a loopback interface (which cannot go down) or set using the router-id command.
2. Why is the DR/BDR election process not a concern in this lab?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
The DR/BDR election process is only an issue on a multi-access network such as Ethernet or Frame Relay. The serial links used in this lab are point-to-point links, so no DR/BDR election is performed.
3. Why would you want to set an OSPF interface to passive?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Answers will vary, but configuring a LAN interface as passive eliminates unnecessary OSPF routing information on that interface, freeing up bandwidth. The router will still advertise the network to its neighbors.
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 29
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs - Final
Router R1
R1#sh run
Building configuration...
Current configuration : 1794 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
no ip domain lookup
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 29
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
interface Loopback0
ip address 1.1.1.1 255.255.255.255
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.1 255.255.255.252
clock rate 128000
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.13.1 255.255.255.252
ip ospf cost 1565
!
router ospf 1
router-id 11.11.11.11
passive-interface GigabitEthernet0/0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.13.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
!
banner motd ^C
Unauthorized Access is Prohibited!
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 25 of 29
^C
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0
password cisco
login
transport input all
line vty 1 4
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
R2#sh run
Building configuration...
Current configuration : 1912 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
no ip domain lookup
ip cef
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 26 of 29
no ipv6 cef
multilink bundle-name authenticated
!
interface Loopback0
ip address 2.2.2.2 255.255.255.255
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.2.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.2 255.255.255.252
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.1 255.255.255.252
clock rate 128000
!
router ospf 1
router-id 22.22.22.22
passive-interface default
no passive-interface Serial0/0/0
no passive-interface Serial0/0/1
network 192.168.2.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited!
^C
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 27 of 29
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0
password cisco
login
transport input all
line vty 1 4
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R3
R3#sh run
Building configuration...
Current configuration : 1674 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 10
!
no ip domain lookup
ip cef
no ipv6 cef
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 28 of 29
multilink bundle-name authenticated
!
interface Loopback0
ip address 3.3.3.3 255.255.255.255
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.13.2 255.255.255.252
clock rate 128000
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.2 255.255.255.252
!
router ospf 1
router-id 33.33.33.33
network 192.168.3.0 0.0.0.255 area 0
network 192.168.13.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited!
^C
!
line con 0
password cisco
logging synchronous
Lab - Configuring Basic Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 29 of 29
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 13
Lab - Configuring OSPFv2 on a Multiaccess Network (Instructor
Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Addressing Table
Device Interface IP Address Subnet Mask
R1 G0/1 192.168.1.1 255.255.255.0
Lo0 192.168.31.11 255.255.255.255
R2 G0/0 192.168.1.2 255.255.255.0
Lo0 192.168.31.22 255.255.255.255
R3 G0/1 192.168.1.3 255.255.255.0
Lo0 192.168.31.33 255.255.255.255
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Configure and Verify OSPFv2 on the DR, BDR, and DROther
Part 3: Configure OSPFv2 Interface Priority to Determine the DR and BDR
Background / Scenario
A multiaccess network is a network with more than two devices on the same shared media. Examples include Ethernet and Frame Relay. On multiaccess networks, OSPFv2 elects a Designated Router (DR) to be the collection and distribution point for link-state advertisements (LSAs) that are sent and received. A Backup Designated Router (BDR) is also elected in case the DR fails. All other routers become DROthers as this indicates a router that is neither the DR nor the BDR.
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 13
Because the DR acts as a focal point for OSPF routing protocol communication, the router chosen should be capable of supporting a heavier traffic load than other routers in the network. A router with a powerful CPU and adequate DRAM is typically the best choice for the DR.
In this lab, you will configure OSPFv2 on the DR, BDR, and DROther. You will then modify the priority of routers to control the outcome of the DR/BDR election process and ensure that the desired router becomes the DR.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). The switches used are Cisco Catalyst 2960s with Cisco IOS Release 15.0(2) (lanbasek9 image). Other routers, switches, and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers and switches have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet cables as shown in the topology
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you will set up the network topology and configure basic settings on the routers.
Step 1: Cable the network as shown in the topology.
Attach the devices as shown in the topology diagram, and cable as necessary.
Step 2: Initialize and reload the routers.
Step 3: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure device names as shown in the topology.
c. Assign class as the privileged EXEC password.
d. Assign cisco as the console and vty passwords.
e. Encrypt the plain text passwords.
f. Configure a MOTD banner to warn users that unauthorized access is prohibited.
g. Configure logging synchronous for the console line.
h. Configure the IP addresses listed in the Addressing Table for all interfaces.
i. Use the show ip interface brief command to verify that the IP addressing is correct and that the interfaces are active.
j. Copy the running configuration to the startup configuration.
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 13
Part 2: Configure and Verify OSPFv2 on the DR, BDR, and DROther
In Part 2, you will configure OSPFv2 on the DR, BDR, and DROther. The DR and BDR election process takes place as soon as the first router has its interface enabled on the multiaccess network. This can happen as the routers are powered-on or when the OSPF network command for that interface is configured. If a new router enters the network after the DR and BDR have already been elected, it does not become the DR or BDR, even if it has a higher OSPF interface priority or router ID than the current DR or BDR. Configure the OSPF process on the router with the highest router ID first to ensure that this router becomes the DR.
Step 1: Configure OSPF on R3.
Configure the OSPF process on R3 (the router with the highest router ID) to ensure that this router becomes the DR.
a. Assign 1 as the process ID for the OSPF process. Configure the router to advertise the 192.168.1.0/24 network. Use an area ID of 0 for the OSPF area-id parameter in the network statement.
What factor determined that R3 has the highest router ID?
____________________________________________________________________________________
Highest loopback address
b. Verify that OSPF has been configured and R3 is the DR.
What command would you use to verify that OSPF has been configured correctly and R3 is the DR?
____________________________________________________________________________________
show ip ospf interface or show ip ospf interface brief
R3# show ip ospf interface
GigabitEthernet0/1 is up, line protocol is up
Internet Address 192.168.1.3/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 192.168.31.33, Network Type BROADCAST, Cost: 1
Topology-MTID Cost Disabled Shutdown Topology Name
0 1 no no Base
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 192.168.31.33, Interface address 192.168.1.3
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:06
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 2
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
Step 2: Configure OSPF on R2.
Configure the OSPF process on R2 (the router with the second highest router ID) to ensure that this router becomes the BDR.
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 13
a. Assign 1 as the process ID for the OSPF process. Configure the router to advertise the 192.168.1.0/24 network. Use an area ID of 0 for the OSPF area-id parameter in the network statement.
b. Verify that the OSPF has been configured and that R2 is the BDR. Record the command used for verification.
____________________________________________________________________________________
show ip ospf interface
R2# show ip ospf interface
GigabitEthernet0/0 is up, line protocol is up
Internet Address 192.168.1.2/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 192.168.31.22, Network Type BROADCAST, Cost: 1
Topology-MTID Cost Disabled Shutdown Topology Name
0 1 no no Base
Transmit Delay is 1 sec, State BDR, Priority 1
Designated Router (ID) 192.168.31.33, Interface address 192.168.1.3
Backup Designated router (ID) 192.168.31.22, Interface address 192.168.1.2
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:03
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 1, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 192.168.31.33 (Designated Router)
Suppress hello for 0 neighbor(s)
c. Issue the show ip ospf neighbor command to view information about the other routers in the OSPF area.
R2# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
192.168.31.33 1 FULL/DR 00:00:33 192.168.1.3 GigabitEthernet0/0
Notice that R3 is the DR.
Step 3: Configure OSPF on R1.
Configure the OSPF process on R1 (the router with the lowest router ID). This router will be designated as DROther instead of DR or BDR.
a. Assign 1 as the process ID for the OSPF process. Configure the router to advertise the 192.168.1.0/24 network. Use an area ID of 0 for the OSPF area-id parameter in the network statement.
b. Issue show ip ospf interface brief command to verify that OSPF has been configured and R1 is the DROther.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Gi0/1 1 0 192.168.1.1/24 1 DROTH 2/2
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 13
c. Issue the show ip ospf neighbor command to view information about the other routers in the OSPF area.
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
192.168.31.22 1 FULL/BDR 00:00:35 192.168.1.2 GigabitEthernet0/1
192.168.31.33 1 FULL/DR 00:00:30 192.168.1.3 GigabitEthernet0/1
What priority are both the DR and BDR routers? _________ One
Part 3: Configure OSPFv2 Interface Priority to Determine the DR and BDR
In Part 3, you will configure router interface priority to determine the DR/BDR election, reset the OSPFv2 process, and then verify that the DR and BDR routers have changed. OSPF interface priority overrides all other settings in determining which routers become the DR and BDR.
Step 1: Configure R1 G0/1 with OSPF priority 255.
A value of 255 is the highest possible interface priority.
R1(config)# interface g0/1
R1(config-if)# ip ospf priority 255
R1(config-if)# end
Step 2: Configure R3 G0/1 with OSPF priority 100.
R3(config)# interface g0/1
R3(config-if)# ip ospf priority 100
R3(config-if)# end
Step 3: Configure R2 G0/0 with OSPF priority 0.
A priority of 0 causes the router to be ineligible to participate in an OSPF election and does not become a DR or BDR.
R2(config)# interface g0/0
R2(config-if)# ip ospf priority 0
R2(config-if)# end
Step 4: Reset the OSPF process.
a. Issue the show ip ospf neighbor command to determine the DR and BDR.
b. Has the DR designation changed? _____________ No Which router is the DR? _____________ R3
Has the BDR designation changed? _____________ Yes Which router is the BDR? _____________ R1
What is the role of R2 now? ____________ DROther
Explain the immediate effects caused by the ip ospf priority command.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
The effect for changing the ospf priority on an interface usually only takes effect when the existing DR goes down. The DR does not relinquish its status just because a new interface reports a higher priority in
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 13
its hello packet. The DR does not change its status until a new election occurs. Issuing the clear ip ospf process command on all of the routers resets the OSPF process.
If a router interface is assigned an OSPF priority of 0, the interface will not be elected for either the DR or BDR role and the router changes its state immediately to DROther.
Note: If the DR and BDR designations did not change, issue the clear ip ospf 1 process command on all of the routers to reset the OSPF processes and force a new election.
If the clear ip ospf process command does not reset the DR and BDR, issue the reload command on all routers after saving the running configuration to the startup configuration.
c. Issue the show ip ospf interface command on R1 and R3 to confirm the priority settings and DR/BDR status on the routers.
R1# show ip ospf interface
GigabitEthernet0/1 is up, line protocol is up
Internet Address 192.168.1.1/24, Area 0
Process ID 1, Router ID 192.168.31.11, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DR, Priority 255
Designated Router (ID) 192.168.31.11, Interface address 192.168.1.1
Backup Designated router (ID) 192.168.31.33, Interface address 192.168.1.3
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:00
Supports Link-local Signaling (LLS)
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 1, maximum is 2
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 2, Adjacent neighbor count is 2
Adjacent with neighbor 192.168.31.22
Adjacent with neighbor 192.168.31.33 (Backup Designated Router)
Suppress hello for 0 neighbor(s)
R3# show ip ospf interface
GigabitEthernet0/1 is up, line protocol is up
Internet Address 192.168.1.3/24, Area 0
Process ID 1, Router ID 192.168.31.33, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State BDR, Priority 100
Designated Router (ID) 192.168.31.11, Interface address 192.168.1.1
Backup Designated router (ID) 192.168.31.33, Interface address 192.168.1.3
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:00
Supports Link-local Signaling (LLS)
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 2
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 2, Adjacent neighbor count is 2
Adjacent with neighbor 192.168.31.22
Adjacent with neighbor 192.168.31.11 (Designated Router)
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 13
Suppress hello for 0 neighbor(s)
Which router is now the DR? ___________ R1
Which router is now the BDR? __________ R3
Did the interface priority override the router ID in determining the DR/BDR? __________ yes
Reflection
1. List the criteria used from highest to lowest for determining the DR on an OSPF network.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Highest is interface priority. Next is highest router ID. The highest router ID can be explicitly set using the router-id command. If no router ID is explicitly set, the router ID is based on the highest loopback address, as it was at the start of this lab. In the event no loopbacks are configured, the router ID is the highest active interface address.
2. What is the significance of a 255 interface priority?
_______________________________________________________________________________________
Highest possible priority
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs
Router R1
R1#show run
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 13
Building configuration...
Current configuration : 1623 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
interface Loopback0
ip address 192.168.31.11 255.255.255.255
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip ospf priority 255
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 13
no ip address
shutdown
!
router ospf 1
network 192.168.1.0 0.0.0.255 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C
Unauthorized access is strictly prohibited.
^C
!
line con 0
password 7 045802150C2E
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 060506324F41
login
transport input all
line vty 5 15
password 7 060506324F41
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
R2#show run
Building configuration...
Current configuration : 1708 bytes
!
version 15.2
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 13
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
interface Loopback0
ip address 192.168.31.22 255.255.255.255
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.2 255.255.255.0
ip ospf priority 0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
no ip address
shutdown
!
router ospf 1
network 192.168.1.0 0.0.0.255 area 0
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 13
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!!
control-plane
!
banner motd ^C
Unauthorized access is strictly prohibited.
^C
!
line con 0
password 7 0822455D0A16
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 110A1016141D
login
transport input all
line vty 5 15
password 7 110A1016141D
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R3
R3#show run
Building configuration...
Current configuration : 1662 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R3
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 13
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 10
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
interface Loopback0
ip address 192.168.31.33 255.255.255.255
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.3 255.255.255.0
ip ospf priority 100
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
no ip address
shutdown
!
router ospf 1
network 192.168.1.0 0.0.0.255 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
Lab - Configuring OSPFv2 on a Multiaccess Network
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 13
!
control-plane
!
banner motd ^C
Unauthorized access is strictly prohibited. ^C
!
line con 0
password 7 02050D480809
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 14141B180F0B
login
transport input all
line vty 5 15
password 7 14141B180F0B
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 24
Lab - Configuring OSFPv2 Advanced Features (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 24
Addressing Table
Device Interface IP Address Subnet Mask Default Gateway
R1 G0/0 192.168.1.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.12.1 255.255.255.252 N/A
S0/0/1 192.168.13.1 255.255.255.252 N/A
R2 Lo0 209.165.200.225 255.255.255.252 N/A
S0/0/0 192.168.12.2 255.255.255.252 N/A
S0/0/1 (DCE) 192.168.23.1 255.255.255.252 N/A
R3 G0/0 192.168.3.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.13.2 255.255.255.252 N/A
S0/0/1 192.168.23.2 255.255.255.252 N/A
PC-A NIC 192.168.1.3 255.255.255.0 192.168.1.1
PC-C NIC 192.168.3.3 255.255.255.0 192.168.3.1
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Configure and Verify OSPF Routing
Part 3: Change OSPF Metrics
Part 4: Configure and Propagate a Static Default Route
Part 5: Configure OSPF Authentication
Background / Scenario
Open Shortest Path First (OSPF) has advanced features to allow changes to be made to control metrics, default route propagation, and security.
In this lab, you will adjust OSPF metrics on the router interfaces, configure OSPF route propagation, and use Message Digest 5 (MD5) authentication to secure OSPF routing information.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 24
Ethernet and serial cables as shown in the topology
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you will set up the network topology and configure basic settings on the PC hosts and routers.
Step 1: Cable the network as shown in the topology.
Step 2: Initialize and reload the routers as necessary.
Step 3: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure device name as shown in the topology.
c. Assign class as the privileged EXEC password.
d. Assign cisco as the console and vty passwords.
e. Encrypt the clear text passwords.
f. Configure a MOTD banner to warn users that unauthorized access is prohibited.
g. Configure logging synchronous for the console line.
h. Configure the IP addresses listed in the Addressing Table for all interfaces.
i. Set the clock rate for all DCE serial interfaces at 128000.
j. Copy the running configuration to the startup configuration.
Step 4: Configure PC hosts.
Refer to the Addressing Table for PC host address information.
Step 5: Test connectivity.
At this point, the PCs are unable to ping each other. However, the routers should be able to ping the directly connected neighbor interfaces, and the PCs should be able to ping their default gateway. Verify and troubleshoot if necessary.
Part 2: Configure and Verify OSPF Routing
In Part 2, you will configure OSPFv2 routing on all routers in the network and then verify that routing tables are updated correctly.
Step 1: Configure the router ID on all routers.
Assign 1 as the process ID for this OSPF process. Each router should be given the following router ID assignments:
R1 Router ID: 1.1.1.1
R2 Router ID: 2.2.2.2
R3 Router ID: 3.3.3.3
R1(config)# router ospf 1
R1(config-router)# router-id 1.1.1.1
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 24
R2(config)# router ospf 1
R2(config-router)# router-id 2.2.2.2
R3(config)# router ospf 1
R3(config-router)# router-id 3.3.3.3
Step 2: Configure OSPF network information on the routers.
R1(config)# router ospf 1
R1(config-router)# network 192.168.1.0 0.0.0.255 area 0
R1(config-router)# network 192.168.12.0 0.0.0.3 area 0
R1(config-router)# network 192.168.13.0 0.0.0.3 area 0
R2(config)# router ospf 1
R2(config-router)# network 192.168.12.0 0.0.0.3 area 0
R2(config-router)# network 192.168.23.0 0.0.0.3 area 0
R3(config)# router ospf 1
R3(config-router)# network 192.168.3.0 0.0.0.255 area 0
R3(config-router)# network 192.168.13.0 0.0.0.3 area 0
R3(config-router)# network 192.168.23.0 0.0.0.3 area 0
Step 3: Verify OSPF routing.
a. Issue the show ip ospf neighbor command to verify that each router is listing the other routers in the network.
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
3.3.3.3 0 FULL/ - 00:00:36 192.168.13.2 Serial0/0/1
2.2.2.2 0 FULL/ - 00:00:33 192.168.12.2 Serial0/0/0
b. Issue the show ip route ospf command to verify that all OSPF networks are present in the routing table on all routers.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.3.0/24 [110/65] via 192.168.13.2, 00:00:20, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/128] via 192.168.13.2, 00:12:58, Serial0/0/1
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 24
[110/128] via 192.168.12.2, 00:03:38, Serial0/0/0
R2# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.1.0/24 [110/65] via 192.168.12.1, 00:06:18, Serial0/0/0
O 192.168.3.0/24 [110/65] via 192.168.23.2, 00:03:38, Serial0/0/1
192.168.13.0/30 is subnetted, 1 subnets
O 192.168.13.0 [110/128] via 192.168.23.2, 00:03:38, Serial0/0/1
[110/128] via 192.168.12.1, 00:04:20, Serial0/0/0
R3# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.1.0/24 [110/65] via 192.168.13.1, 00:16:12, Serial0/0/0
192.168.12.0/30 is subnetted, 1 subnets
O 192.168.12.0 [110/128] via 192.168.23.1, 00:06:52, Serial0/0/1
[110/128] via 192.168.13.1, 00:16:12, Serial0/0/0
Step 4: Test end-to-end connectivity.
Ping PC-C from PC-A to verify end-to-end connectivity. The pings should be successful. If they are not, troubleshoot as necessary.
Note: It may be necessary to disable the PC firewall for the pings to be successful.
Part 3: Change OSPF Metrics
In Part 3, you will change OSPF metrics using the bandwidth command, the auto-cost reference-bandwidth command, and the ip ospf cost command. Making these changes will provide more accurate metrics to OSPF.
Note: All DCE interfaces should have been configured with a clocking rate of 128000 in Part 1.
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 24
Step 1: Change the bandwidth on all serial interfaces to 128Kb/s.
a. Issue the show ip ospf interface brief command to view the default cost settings on the router interfaces.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/1 1 0 192.168.13.1/30 64 P2P 1/1
Se0/0/0 1 0 192.168.12.1/30 64 P2P 1/1
Gi0/0 1 0 192.168.1.1/24 1 DR 0/0
b. Use the bandwidth 128 interface command on all serial interfaces.
R1(config)# interface s0/0/0
R1(config-if)# bandwidth 128
R1(config)# interface s0/0/1
R1(config-if)# bandwidth 128
R2(config)# interface s0/0/0
R2(config-if)# bandwidth 128
R2(config)# interface s0/0/1
R2(config-if)# bandwidth 128
R3(config)# interface s0/0/0
R3(config-if)# bandwidth 128
R3(config)# interface s0/0/1
R3(config-if)# bandwidth 128
c. Issue the show ip ospf interface brief command to view the new cost settings.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/1 1 0 192.168.13.1/30 781 P2P 1/1
Se0/0/0 1 0 192.168.12.1/30 781 P2P 1/1
Gi0/0 1 0 192.168.1.1/24 1 DR 0/0
Step 2: Change the reference bandwidth on the routers.
a. Issue the auto-cost reference-bandwidth 1000 command on the routers to change the default reference bandwidth setting to account for Gigabit Ethernet Interfaces.
R1(config)# router ospf 1
R1(config-router)# auto-cost reference-bandwidth 1000
% OSPF: Reference bandwidth is changed.
Please ensure reference bandwidth is consistent across all routers.
R2(config)# router ospf 1
R2(config-router)# auto-cost reference-bandwidth 1000
% OSPF: Reference bandwidth is changed.
Please ensure reference bandwidth is consistent across all routers.
R3(config)# router ospf 1
R3(config-router)# auto-cost reference-bandwidth 1000
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 24
% OSPF: Reference bandwidth is changed.
Please ensure reference bandwidth is consistent across all routers.
b. Re-issue the show ip ospf interface brief command to view how this command has changed cost values.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/1 1 0 192.168.13.1/30 7812 P2P 0/0
Se0/0/0 1 0 192.168.12.1/30 7812 P2P 0/0
Gi0/0 1 0 192.168.1.1/24 1 DR 0/0
Note: If the router had Fast Ethernet interfaces instead of Gigabit Ethernet interfaces, then the cost would now be 10 on those interfaces.
Step 3: Change the route cost.
a. Issue the show ip route ospf command to display the current OSPF routes on R1. Notice that there are currently two routes in the table that use the S0/0/1 interface.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.3.0/24 [110/7822] via 192.168.13.2, 00:00:12, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/15624] via 192.168.13.2, 00:00:12, Serial0/0/1
[110/15624] via 192.168.12.2, 00:20:03, Serial0/0/0
b. Apply the ip ospf cost 16000 command to the S0/0/1 interface on R1. A cost of 16,000 is higher than the accumulated cost of the route through R2 which is 15,624.
R1(config)# int s0/0/1
R1(config-if)# ip ospf cost 16000
c. Issue the show ip ospf interface brief command on R1 to view the cost change to S0/0/1.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/1 1 0 192.168.13.1/30 16000 P2P 1/1
Se0/0/0 1 0 192.168.12.1/30 7812 P2P 1/1
Gi0/0 1 0 192.168.1.1/24 1 DR 0/0
d. Re-issue the show ip route ospf command on R1 to display the effect this change has made on the routing table. All OSPF routes for R1 are now being routed through R2.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 24
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.3.0/24 [110/15625] via 192.168.12.2, 00:05:31, Serial0/0/0
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/15624] via 192.168.12.2, 01:14:02, Serial0/0/0
Explain why the route to the 192.168.3.0/24 network on R1 is now going through R2?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
OSPF will choose the route with the least accumulated cost. The route with the lowest accumulated cost is: R1-S0/0/0 + R2-S0/0/1 + R3-G0/0, or 7812 + 7812 + 1 = 15,625. This metric is smaller than the accumulated cost of R1-S0/0/1 + R3-G0/0, or 16,000 + 1 = 16,001.
Part 4: Configure and Propagate a Static Default Route
In Part 4, you will use a loopback interface on R2 to simulate an ISP connection to the Internet. You will create a static default route on R2, and then OSPF will propagate that route to the other two routers on the network.
Step 1: Configure a static default route on R2 to loopback 0.
Configure a default route using the loopback interface configured in Part 1, to simulate a connection to an ISP.
R2(config)# ip route 0.0.0.0 0.0.0.0 loopback0
Step 2: Have OSPF propagate the default static route.
Issue the default-information originate command to include the static default route in the OSPF updates that are sent from R2.
R2(config)# router ospf 1
R2(config-router)# default-information originate
Step 3: Verify OSPF static route propagation.
a. Issue the show ip route static command on R2.
R2# show ip route static
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 24
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
S* 0.0.0.0/0 is directly connected, Loopback0
b. Issue the show ip route command on R1 to verify the propagation of the static route from R2.
R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 192.168.12.2 to network 0.0.0.0
O*E2 0.0.0.0/0 [110/1] via 192.168.12.2, 00:02:57, Serial0/0/0
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, GigabitEthernet0/0
L 192.168.1.1/32 is directly connected, GigabitEthernet0/0
O 192.168.3.0/24 [110/15634] via 192.168.12.2, 00:03:35, Serial0/0/0
192.168.12.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.12.0/30 is directly connected, Serial0/0/0
L 192.168.12.1/32 is directly connected, Serial0/0/0
192.168.13.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.13.0/30 is directly connected, Serial0/0/1
L 192.168.13.1/32 is directly connected, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/15624] via 192.168.12.2, 00:05:18, Serial0/0/0
c. Verify end-to-end connectivity by issuing a ping from PC-A to the ISP interface address 209.165.200.225.
Were the pings successful? ________________ Yes
Part 5: Configure OSPF Authentication
OSPF authentication can be set up at the link level or the area level. There are three authentication types available for OSPF authentication: Null, plain text, or MD5. In Part 5, you will set up OSPF MD5 authentication, which is the strongest available.
Step 1: Set up MD5 OSPF authentication on a single link.
a. Issue the debug ip ospf adj command on R2 to view OSPF adjacency messages.
R2# debug ip ospf adj
OSPF adjacency debugging is on
b. Assign an MD5 key for OSPF Authentication on R1, interface S0/0/0.
R1(config)# interface s0/0/0
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 24
R1(config-if)# ip ospf message-digest-key 1 md5 MD5KEY
c. Activate MD5 authentication on R1, interface S0/0/0.
R1(config-if)# ip ospf authentication message-digest
OSPF debug messages informing you of a Mismatched Authentication type displays on R2.
*Mar 19 00:03:18.187: OSPF-1 ADJ Se0/0/0: Rcv pkt from 192.168.12.1 : Mismatched
Authentication type. Input packet specified type 2, we use type 0
d. Issue the u all command, which is the shortest version of the undebug all command on R2 to disable debugging.
e. Configure OSPF authentication on R2, interface S0/0/0. Use the same MD5 password you entered for R1.
f. Issue a show ip ospf interface s0/0/0 command on R2. This command displays the type of authentication at the bottom of the output.
R2# show ip ospf interface s0/0/0
Serial0/0/0 is up, line protocol is up
Internet Address 192.168.12.2/30, Area 0, Attached via Network Statement
Process ID 1, Router ID 2.2.2.2, Network Type POINT_TO_POINT, Cost: 7812
Topology-MTID Cost Disabled Shutdown Topology Name
0 7812 no no Base
Transmit Delay is 1 sec, State POINT_TO_POINT
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:03
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 1, maximum is 1
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 1.1.1.1
Suppress hello for 0 neighbor(s)
Message digest authentication enabled
Youngest key id is 1
Step 2: Set up OSPF authentication at the area level.
a. Issue the area 0 authentication command to set MD5 authentication for OSPF Area 0 on R1.
R1(config)# router ospf 1
R1(config-router)# area 0 authentication message-digest
b. This option still requires that you assign the MD5 password at the interface level.
R1(config)# interface s0/0/1
R1(config-if)# ip ospf message-digest-key 1 md5 MD5KEY
c. Issue the show ip ospf neighbor command on R3. R1 no longer has an adjacency with R3.
R3# show ip ospf neighbor
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 24
Neighbor ID Pri State Dead Time Address Interface
2.2.2.2 0 FULL/ - 00:00:31 192.168.23.1 Serial0/0/1
d. Set up area authentication on R3 and assign the same MD5 password to interface S0/0/0.
R3(config)# router ospf 1
R3(config-router)# area 0 authentication message-digest
R3(config-router)# interface s0/0/0
R3(config-if)# ip ospf message-digest-key 1 md5 MD5KEY
e. Issue the show ip ospf neighbor command on R3. Notice that R1 is now showing as a neighbor, but R2 is missing.
R3# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
1.1.1.1 0 FULL/ - 00:00:38 192.168.13.1 Serial0/0/0
Why is R2 no longer showing as an OSPF neighbor?
____________________________________________________________________________________
____________________________________________________________________________________
R2 currently is only configured with OSPF authentication on S0/0/0. For R2 to form an adjacency with R3 again, interface S0/0/1 must also perform OSPF authentication.
f. Configure R2 to perform area-level MD5 authentication.
R2(config)# router ospf 1
R2(config-router)# area 0 authentication message-digest
g. Assign MD5KEY as the MD5 password for the link between R2 and R3.
R2(config-router)# interface s0/0/1
R2(config-if)# ip ospf message-digest-key 1 md5 MD5KEY
R3(config-router)# interface s0/0/1
R3(config-if)# ip ospf message-digest-key 1 md5 MD5KEY
h. Issue the show ip ospf neighbor command on all routers to verify that all adjacencies have been re-established.
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
3.3.3.3 0 FULL/ - 00:00:39 192.168.13.2 Serial0/0/1
2.2.2.2 0 FULL/ - 00:00:35 192.168.12.2 Serial0/0/0
R2# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
3.3.3.3 0 FULL/ - 00:00:36 192.168.23.2 Serial0/0/1
1.1.1.1 0 FULL/ - 00:00:32 192.168.12.1 Serial0/0/0
R3# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 24
2.2.2.2 0 FULL/ - 00:00:33 192.168.23.1 Serial0/0/1
1.1.1.1 0 FULL/ - 00:00:39 192.168.13.1 Serial0/0/0
Reflection
1. What is the easiest and preferred method of manipulating OSPF route costs?
_______________________________________________________________________________________
_______________________________________________________________________________________
Using the ip ospf cost command overrides the cost calculation completely and sets the link cost to the desired amount.
2. What does the default-information originate command do for a network using the OSPF routing protocol?
_______________________________________________________________________________________
The default-information originate command is used to inject a default route into an OSPF area which will propagate the default route to other OSPF routers.
3. Why is it a good idea to use OSPF authentication?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Routing protocols are used to exchange reachability information between routers. Routing information learned from peers is used to determine the next hop toward the destination. To route traffic correctly, it is necessary to prevent malicious or incorrect routing information from being introduced into the routing table. You should enable authentication in OSPF in order to exchange routing information in a secure manner.
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 24
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs
Router R1 (After parts 1 and 2 of this lab)
R1#sh run
Building configuration...
Current configuration : 1557 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 24
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.12.1 255.255.255.252
clock rate 128000
!
interface Serial0/0/1
ip address 192.168.13.1 255.255.255.252
!
router ospf 1
router-id 1.1.1.1
network 192.168.1.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.13.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited!
^C
!
line con 0
password 7 01100F175804
logging synchronous
login
line aux 0
line 2
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 24
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 045802150C2E
login
transport input all
scheduler allocate 20000 1000
!
end
Router R2 (After parts 1 and 2 of this lab)
R2#sh run
Building configuration...
Current configuration : 1572 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
interface Loopback0
ip address 209.165.200.225 255.255.255.252
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 24
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.12.2 255.255.255.252
!
interface Serial0/0/1
ip address 192.168.23.1 255.255.255.252
clock rate 128000
!
router ospf 1
router-id 2.2.2.2
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited!
^C
!
line con 0
password 7 01100F175804
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 030752180500
login
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 24
transport input all
scheduler allocate 20000 1000
!
end
Router R3 (After parts 1 and 2 of this lab)
R3#sh run
Building configuration...
Current configuration : 1596 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.13.2 255.255.255.252
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 24
clock rate 128000
!
interface Serial0/0/1
ip address 192.168.23.2 255.255.255.252
!
router ospf 1
router-id 3.3.3.3
network 192.168.3.0 0.0.0.255 area 0
network 192.168.13.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited!
^C
!
line con 0
password 7 01100F175804
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 05080F1C2243
login
transport input all
scheduler allocate 20000 1000
!
End
Router R1 (Final)
R1# show run
Building configuration...
Current configuration : 1895 bytes
!
version 15.2
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 24
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.1 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 7 013E2251702E3F
clock rate 128000
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.13.1 255.255.255.252
ip ospf message-digest-key 1 md5 7 12342142392E35
ip ospf cost 16000
!
router ospf 1
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 24
router-id 1.1.1.1
auto-cost reference-bandwidth 1000
area 0 authentication message-digest
network 192.168.1.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.13.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd @ Unauthorized Access is Prohibited! @
!
line con 0
password 7 01100F175804
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 045802150C2E
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2 (Final)
R2# show run
Building configuration...
Current configuration : 1878 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R2
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 24
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
interface Loopback0
ip address 209.165.200.225 255.255.255.252
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.2 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 7 002937532F7E32
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.1 255.255.255.252
ip ospf message-digest-key 1 md5 7 1328334720293D
clock rate 128000
!
router ospf 1
router-id 2.2.2.2
auto-cost reference-bandwidth 1000
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 24
area 0 authentication message-digest
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
default-information originate
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Loopback0
!
control-plane
!
banner motd @ Unauthorized Access is Prohibited! @
!
line con 0
password 7 01100F175804
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 030752180500
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R3 (Final)
R3# show run
Building configuration...
Current configuration : 1904 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R3
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 24
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.13.2 255.255.255.252
ip ospf message-digest-key 1 md5 7 10632D4C2E322B
clock rate 128000
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.2 255.255.255.252
ip ospf message-digest-key 1 md5 7 10632D4C2E322B
!
router ospf 1
router-id 3.3.3.3
auto-cost reference-bandwidth 1000
area 0 authentication message-digest
network 192.168.3.0 0.0.0.255 area 0
network 192.168.13.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
Lab - Configuring OSFPv2 Advanced Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 24
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd @ Unauthorized Access is Prohibited! @
!
line con 0
password 7 01100F175804
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 05080F1C2243
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 31
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
(Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 31
Addressing Table
Device
OSPF
Router ID Interface IP Address Default Gateway
R1 1.1.1.1 G0/0
192.168.1.1/24
2001:DB8:ACAD:A::1/64
FE80::1 link-local
N/A
S0/0/0
192.168.12.1/30
2001:DB8:ACAD:12::1/64
FE80::1 link-local
N/A
S0/0/1
192.18.13.1/30
2001:DB8:ACAD:13::1/64
FE80::1 link-local
N/A
R2 2.2.2.2 G0/0
192.168.2.1/24
2001:DB8:ACAD:B::2/64
FE80::2 link-local
N/A
S0/0/0
192.168.12.2/30
2001:DB8:ACAD:12::2/64
FE80::2 link-local
N/A
S0/0/1
192.168.23.1/30
2001:DB8:ACAD:23::2/64
FE80::2 link-local
N/A
R3 3.3.3.3 G0/0
192.168.3.1/24
2001:DB8:ACAD:C::3/64
FE80::3 link-local
N/A
S0/0/0
192.168.13.2/30
2001:DB8:ACAD:13::3/64
FE80::3 link-local
N/A
S0/0/1
192.168.23.2/30
2001:DB8:ACAD:23::3/64
FE80::3 link-local
N/A
PC-A NIC 192.168.1.3/24
2001:DB8:ACAD:A::A/64
192.168.1.1
FE80::1
PC-B NIC 192.168.2.3/24
2001:DB8:ACAD:B::B/64
192.168.2.1
FE80::2
PC-C NIC 192.168.3.3/24
2001:DB8:ACAD:C::C/64
192.168.3.1
FE80::3
Objectives
Part 1: Build the Network and Load Device Configurations
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 31
Part 2: Troubleshoot Layer 3 Connectivity
Part 3: Troubleshoot OSPFv2
Part 4: Troubleshoot OSPFv3
Background / Scenario
Open Shortest Path First (OSPF) is a link-state routing protocol for IP networks. OSPFv2 is defined for IPv4 networks, and OSPFv3 is defined for IPv6 networks. OSPFv2 and OSPFv3 are completely isolated routing protocols, changes in OSPFv2 do not affect OSPFv3 routing, and vice versa.
In this lab, a single-area OSPF network running OSPFv2 and OSPFv3 is experiencing problems. You have been assigned to find the problems with the network and correct them.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet and serial cables as shown in the topology
Part 1: Build the Network and Load Device Configurations
In Part 1, you will set up the network topology and configure basic settings on the PC hosts and routers.
Step 1: Cable the network as shown in the topology.
Step 2: Configure PC hosts.
Step 3: Load router configurations.
Load the following configurations into the appropriate router. All routers have the same passwords. The privileged EXEC password is cisco. The password for console and vty access is class.
Router R1 Configuration:
conf t
service password-encryption
no ip domain lookup
hostname R1
enable secret class
line con 0
logging synchronous
password cisco
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 31
login
line vty 0
password cisco
login
banner motd @Unauthorized Access is Prohibited!@
ipv6 unicast-routing
ipv6 router ospf 1
router-id 1.1.1.1
passive-interface g0/0
interface g0/0
ip address 192.168.1.1 255.255.255.0
ipv6 address 2001:db8:acad:a::1/64
ipv6 address fe80::1 link-local
!ipv6 ospf 1 area 0
!no shutdown
interface s0/0/0
clock rate 128000
ip address 192.168.12.1 255.255.255.0
!ip address 192.168.12.1 255.255.255.252
ipv6 address 2001:db8:acad:12::1/64
ipv6 address fe80::1 link-local
ipv6 ospf 1 area 0
no shutdown
interface s0/0/1
ip address 192.168.13.1 255.255.255.0
!ip address 192.168.13.1 255.255.255.252
ipv6 address 2001:db8:acad:13::1/64
ipv6 address fe80::1 link-local
ipv6 ospf 1 area 0
no shutdown
router ospf 1
network 192.168.1.0 0.0.0.255 area 0
network 129.168.12.0 0.0.0.3 area 0
!network 192.168.12.0 0.0.0.3 area 0
network 192.168.13.0 0.0.0.3 area 0
passive-interface g0/0
!router-id 1.1.1.1
end
Router R2 Configuration:
conf t
service password-encryption
no ip domain lookup
hostname R2
enable secret class
line con 0
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 31
logging synchronous
password cisco
login
line vty 0
password cisco
login
banner motd @Unauthorized Access is Prohibited!@
ipv6 unicast-routing
ipv6 router ospf 1
router-id 2.2.2.2
!passive-interface g0/0
interface g0/0
ip address 192.168.2.1 255.255.255.0
ipv6 address 2001:db8:acad:B::2/64
ipv6 address fe80::1 link-local
!no ipv6 address fe80::1 link-local
!ipv6 address fe80::2 link-local
!ipv6 ospf 1 area 0
no shutdown
interface s0/0/0
ip address 192.168.12.2 255.255.255.252
ipv6 address 2001:db8:acad:12::2/64
ipv6 address fe80::2 link-local
ipv6 ospf 1 area 0
no shutdown
interface s0/0/1
clock rate 128000
!ip address 192.168.23.1 255.255.255.252
ipv6 address 2001:db8:acad:23::2/64
ipv6 address fe80::2 link-local
!ipv6 ospf 1 area 0
no shutdown
router ospf 1
network 192.168.2.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
!passive-interface g0/0
end
Router R3 Configuration:
conf t
service password-encryption
no ip domain lookup
enable secret class
hostname R3
line con 0
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 31
logging synchronous
password cisco
login
line vty 0
password cisco
login
banner motd @Unauthorized Access is Prohibited!@
interface g0/0
!ip address 192.168.3.1 255.255.255.0
ipv6 address 2001:db8:acad:c::3/64
ipv6 address fe80::3 link-local
!ipv6 ospf 1 area 0
!no shutdown
interface s0/0/0
clock rate 128000
ip address 192.168.13.1 255.255.255.252
!ip address 192.168.13.2 255.255.255.252
ipv6 address 2001:db8:acad:13::3/64
ipv6 address fe80::3 link-local
!ipv6 ospf 1 area 0
no shutdown
interface s0/0/1
ip address 192.168.23.2 255.255.255.252
ipv6 address 2001:db8:acad:23::3/64
ipv6 address fe80::3 link-local
!ipv6 ospf 1 area 0
!no shutdown
!ipv6 unicast-routing
!ipv6 router ospf 1
!router-id 3.3.3.3
!passive-interface g0/0
router ospf 1
network 192.168.3.0 0.0.0.255 area 0
!network 192.168.13.0 0.0.0.3 area 0
!network 192.168.23.0 0.0.0.3 area 0
passive-interface g0/0
end
Part 2: Troubleshoot Layer 3 Connectivity
In Part 2, you will verify that Layer 3 connectivity is established on all interfaces. You will need to test both IPv4 and IPv6 connectivity for all device interfaces.
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 31
Step 1: Verify that the interfaces listed in the Addressing Table are active and configured with
the correct IP address information.
a. Issue the show ip interface brief command on all routers to verify that the interfaces are in an up/up state. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1 - G0/0 is administratively down R2 - S0/0/1 is down R3 - G0/0 & S0/0/1 are administratively down
R1# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 192.168.1.1 YES manual administratively down down
GigabitEthernet0/1 unassigned YES unset administratively down down
Serial0/0/0 192.168.12.1 YES manual up up
Serial0/0/1 192.168.13.1 YES manual up up
R2# show ip interface bri
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 192.168.2.1 YES manual up up
GigabitEthernet0/1 unassigned YES unset administratively down down
Serial0/0/0 192.168.12.2 YES manual up up
Serial0/0/1 unassigned YES unset down down
R3# show ip interface bri
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 unassigned YES unset administratively down down
GigabitEthernet0/1 unassigned YES unset administratively down down
Serial0/0/0 192.168.3.1 YES manual up up
Serial0/0/1 192.168.23.2 YES manual administratively down down
b. Issue the show run interface command to verify IP address assignments on all router interfaces. Compare the interface IP addresses against the Addressing Table and verify the subnet mask assignments. For IPv6, verify that the link-local address has been assigned. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1 – S0/0/0 & S0/0/1 incorrect subnet mask, should be 255.255.255.252 R2 – G0/0 incorrect IPv6 link local address, S0/0/1 no IPv4 address R3 – G0/0 no IPv4 address, S0/0/0 incorrect IPv4 address
--R1 Intefaces --
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 31
R1# show run interface g0/0
Building configuration...
Current configuration : 178 bytes
!
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
shutdown
duplex auto
speed auto
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:A::1/64
end
R1# show run interface s0/0/0
Building configuration...
Current configuration : 158 bytes
!
interface Serial0/0/0
ip address 192.168.12.1 255.255.255.0
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 ospf 1 area 0
clock rate 2000000
end
R1# show run interface s0/0/1
Building configuration...
Current configuration : 138 bytes
!
interface Serial0/0/1
ip address 192.168.13.1 255.255.255.0
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:13::1/64
ipv6 ospf 1 area 0
end
--R2 Interfaces --
R2# show run interface g0/0
Building configuration...
Current configuration : 168 bytes
!
interface GigabitEthernet0/0
ip address 192.168.2.1 255.255.255.0
duplex auto
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 31
speed auto
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:B::2/64
end
R2# show run interface s0/0/0
Building configuration...
Current configuration : 160 bytes
!
interface Serial0/0/0
ip address 192.168.12.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:12::2/64
ipv6 ospf 1 area 0
end
R2# show run interface s0/0/1
Building configuration...
Current configuration : 133 bytes
!
interface Serial0/0/1
no ip address
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
clock rate 128000
end
--R3 Interfaces --
R3# show run interface g0/0
Building configuration...
Current configuration : 155 bytes
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:C::3/64
end
R3# show run interface s0/0/0
Building configuration...
Current configuration : 159 bytes
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 31
!
interface Serial0/0/0
ip address 192.168.13.1 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:13::3/64
clock rate 128000
end
R3# show run interface s0/0/1
Building configuration...
Current configuration : 150 bytes
!
interface Serial0/0/1
ip address 192.168.23.2 255.255.255.252
shutdown
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:23::3/64
end
c. Resolve all problems that are found. Record the commands used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# interface g0/0
R1(config-if)# no shutdown
R1(config-if)# interface s0/0/0
R1(config-if)# ip address 192.168.12.1 255.255.255.252
R1(config-if)# interface s0/0/1
R1(config-if)# ip address 192.168.13.1 255.255.255.252
R1(config-if)# end
R2(config)# interface g0/0
R2(config-if)# no ipv6 address fe80::1 link-local
R2(config-if)# ipv6 address fe80::2 link-local
R2(config-if)# interface s0/0/1
R2(config-if)# ip address 192.168.23.1 255.255.255.252
R2(config-if)# end
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 31
R3(config)# interface g0/0
R3(config-if)# ip address 192.168.3.1 255.255.255.0
R3(config-if)# no shutdown
R3(config-if)# interface s0/0/0
R3(config-if)# ip address 192.168.13.2 255.255.255.252
R3(config-if)# interface s0/0/1
R3(config-if)# no shutdown
R3(config-if)# end
d. Using the ping command, verify that each router has network connectivity with the serial interfaces on the neighbor routers. Verify that the PCs can ping their default gateways. If problems still exist, continue troubleshooting Layer 3 issues.
Part 3: Troubleshoot OSPFv2
In Part 3, you will troubleshoot OSPFv2 problems and make the necessary changes needed to establish OSPFv2 routes and end-to-end IPv4 connectivity.
Note: LAN (G0/0) interfaces should not advertise OSPF routing information, but routes to these networks should be in the routing tables.
Step 1: Test IPv4 end-to-end connectivity.
From each PC host, ping the other PC hosts in the topology to verify end-to-end connectivity.
Note: It may be necessary to disable the PC firewall before testing, to ping between PCs.
a. Ping from PC-A to PC-B. Were the pings successful? _____________ No
b. Ping from PC-A to PC-C. Were the pings successful? _____________ No
c. Ping from PC-B to PC-C. Were the pings successful? _____________ No
Step 2: Verify that all interfaces are assigned to OSPFv2 area 0 on R1.
a. Issue the show ip protocols command to verify that OSPF is running and that all networks are advertised in area 0. Verify that the router ID is set correctly. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Router ID is incorrectly configured. The router ID should be 1.1.1.1, not 192.168.13.1. The network 129.168.12.0 0.0.0.3 area 0 statement is incorrect. The network statement should be for 192.168.12.0/30.
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 192.168.13.1
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
129.168.12.0 0.0.0.3 area 0
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 31
192.168.1.0 0.0.0.255 area 0
192.168.13.0 0.0.0.3 area 0
Routing Information Sources:
Gateway Distance Last Update
Distance: (default is 110)
b. Make the necessary changes to the configuration on R1 based on the output from the show ip protocols command. Record the commands used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# router ospf 1
R1(config-router)# no network 129.168.12.0 0.0.0.3 area 0
R1(config-router)# network 192.168.12.0 0.0.0.3 area 0
R1(config-router)# router-id 1.1.1.1
R1(config-router)# end
c. Issue the clear ip ospf process command if necessary.
d. Re-issue the show ip protocols command to verify that your changes had the desired effect.
e. Issue the show ip ospf interface brief command to verify that all interfaces are listed as OSPF networks assigned to area 0.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/0 1 0 192.168.12.1/30 64 P2P 1/1
Se0/0/1 1 0 192.168.13.1/30 64 P2P 0/0
Gi0/0 1 0 192.168.1.1/24 1 DR 0/0
f. Issue the show ip ospf interface g0/0 command to verify that G0/0 is a passive interface.
Note: This information is also in the show ip protocols command.
R1# show ip ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Internet Address 192.168.1.1/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 1.1.1.1, Network Type BROADCAST, Cost: 1
Topology-MTID Cost Disabled Shutdown Topology Name
0 1 no no Base
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 1.1.1.1, Interface address 192.168.1.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
No Hellos (Passive interface)
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 31
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
g. Resolve any problems discovered on R1. List any additional changes made to R1. If no problems were found on the device, then respond with “no problems were found”.
____________________________________________________________________________________
No problems were found
Instructor Note: The passive interface command was configured correctly in the original configs.
Step 3: Verify that all interfaces are assigned to OSPFv2 area 0 on R2.
a. Issue the show ip protocols command to verify that OSPF is running and that all networks are being advertised in area 0. Verify that the router ID is set correctly. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Router ID is incorrect 192.168.12.2. The correct router ID is 2.2.2.2.
R2# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 192.168.12.2
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.2.0 0.0.0.255 area 0
192.168.12.0 0.0.0.3 area 0
192.168.23.0 0.0.0.3 area 0
Routing Information Sources:
Gateway Distance Last Update
1.1.1.1 110 00:16:38
192.168.13.1 110 00:17:01
Distance: (default is 110)
b. Make the necessary changes to the configuration on R2 based on the output from the show ip protocols command. Record the commands used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R2(config)# router ospf 1
R2(config-router)# router-id 2.2.2.2
c. Issue the clear ip ospf process command if necessary.
d. Re-issue the show ip protocols command to verify that your changes had the desired effect.
e. Issue the show ip ospf interface brief command to verify that all interfaces are listed as OSPF networks assigned to area 0.
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 31
R2# sh ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/1 1 0 192.168.23.1/30 64 P2P 0/0
Se0/0/0 1 0 192.168.12.2/30 64 P2P 1/1
Gi0/0 1 0 192.168.2.1/24 1 DR 0/0
f. Issue the show ip ospf interface g0/0 command to verify that G0/0 is a passive interface.
Note: This information is also available from the show ip protocols command.
R2# show ip ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Internet Address 192.168.2.1/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 2.2.2.2, Network Type BROADCAST, Cost: 1
Topology-MTID Cost Disabled Shutdown Topology Name
0 1 no no Base
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 2.2.2.2, Interface address 192.168.2.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
Hello due in 00:00:00
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
g. Resolve any problems discovered on R2. List any additional changes made to R2. If no problems were found on the device, then respond with “no problems were found”.
____________________________________________________________________________________
R2(config)# router ospf 1
R2(config-router)# passive-interface g0/0
Step 4: Verify that all interfaces are assigned to OSPFv2 area 0 on R3.
a. Issue the show ip protocols command to verify that OSPF is running and that all networks are being advertised in area 0. Verify that the router ID is set correctly as well. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
The router ID, 192.168.13.1 is incorrectly configured. The correct router ID for R3 is 3.3.3.3. The network statements for 192.168.13.0/30 and 192.168.23.0/30 are missing.
R3# show ip protocols
*** IP Routing is NSF aware ***
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 31
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 192.168.13.1
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.3.0 0.0.0.255 area 0
Passive Interface(s):
GigabitEthernet0/0
Routing Information Sources:
Gateway Distance Last Update
Distance: (default is 110)
b. Make the necessary changes to the configuration on R3 based on the output from the show ip protocols command. Record the commands used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R3(config)# router ospf 1
R3(config-router)# network 192.168.13.0 0.0.0.3 area 0
R3(config-router)# network 192.168.23.0 0.0.0.3 area 0
R3(config-router)# router-id 3.3.3.3
c. Issue the clear ip ospf process command if necessary.
d. Re-issue the show ip protocols command to verify that your changes had the desired effect.
e. Issue the show ip ospf interface brief command to verify that all interfaces are listed as OSPF networks assigned to area 0.
R3# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/1 1 0 192.168.23.2/30 64 P2P 1/1
Se0/0/0 1 0 192.168.13.2/30 64 P2P 1/1
Gi0/0 1 0 192.168.3.1/24 1 DR 0/0
f. Issue the show ip ospf interface g0/0 command to verify that G0/0 is a passive interface.
Note: This information is also in the show ip protocols command.
R3# show ip ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Internet Address 192.168.3.1/24, Area 0, Attached via Network Statement
Process ID 1, Router ID 3.3.3.3, Network Type BROADCAST, Cost: 1
Topology-MTID Cost Disabled Shutdown Topology Name
0 1 no no Base
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 3.3.3.3, Interface address 192.168.3.1
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
oob-resync timeout 40
No Hellos (Passive interface)
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 31
Supports Link-local Signaling (LLS)
Cisco NSF helper support enabled
IETF NSF helper support enabled
Index 1/1, flood queue length 0
Next 0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
g. Resolve any problems discovered on R3. List any additional changes made to R3. If no problems were found on the device, then respond with “no problems were found”.
____________________________________________________________________________________
No problems were found
Instructor Note: The passive interface command was configured correctly in the original configuration.
Step 5: Verify OSPF neighbor information.
a. Issue the show ip ospf neighbor command on all routers to view the OSPF neighbor information.
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
2.2.2.2 0 FULL/ - 00:00:38 192.168.12.2 Serial0/0/0
3.3.3.3 0 FULL/ - 00:00:36 192.168.13.2 Serial0/0/1
R2# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
3.3.3.3 0 FULL/ - 00:00:33 192.168.23.2 Serial0/0/1
1.1.1.1 0 FULL/ - 00:00:35 192.168.12.1 Serial0/0/0
R3# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
2.2.2.2 0 FULL/ - 00:00:31 192.168.23.1 Serial0/0/1
1.1.1.1 0 FULL/ - 00:00:32 192.168.13.1 Serial0/0/0
Step 6: Verify OSPFv2 Routing Information.
a. Issue the show ip route ospf command to verify that each router has OSPFv2 routes to all non-adjoining networks.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 31
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.2.0/24 [110/65] via 192.168.12.2, 00:26:56, Serial0/0/0
O 192.168.3.0/24 [110/65] via 192.168.13.2, 00:12:20, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
O 192.168.23.0 [110/128] via 192.168.13.2, 00:12:20, Serial0/0/1
[110/128] via 192.168.12.2, 00:26:56, Serial0/0/0
R2# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.1.0/24 [110/65] via 192.168.12.1, 00:32:23, Serial0/0/0
O 192.168.3.0/24 [110/65] via 192.168.23.2, 00:17:47, Serial0/0/1
192.168.13.0/30 is subnetted, 1 subnets
O 192.168.13.0 [110/128] via 192.168.23.2, 00:17:47, Serial0/0/1
[110/128] via 192.168.12.1, 00:32:23, Serial0/0/0
R3# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
O 192.168.1.0/24 [110/65] via 192.168.13.1, 00:14:12, Serial0/0/0
O 192.168.2.0/24 [110/65] via 192.168.23.1, 00:14:12, Serial0/0/1
192.168.12.0/30 is subnetted, 1 subnets
O 192.168.12.0 [110/128] via 192.168.23.1, 00:14:12, Serial0/0/1
[110/128] via 192.168.13.1, 00:14:12, Serial0/0/0
Are all OSPFv2 routes available? ________ yes
If any OSPFv2 routes are missing, what is missing?
____________________________________________________________________________________
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 31
All OSPFv2 routes are present.
b. If any routing information is missing, resolve these issues.
Instructor Note: All problems should have been resolved.
Step 7: Verify IPv4 end-to-end connectivity.
From each PC, verify that IPv4 end-to-end connectivity exists. PCs should be able to ping the other PC hosts in the topology. If IPv4 end-to-end connectivity does not exist, then continue troubleshooting to resolve any remaining issues.
Note: It may be necessary to disable the PC firewall to ping between PCs.
Part 4: Troubleshoot OSPFv3
In Part 4, you will troubleshoot OSPFv3 problems and make the necessary changes needed to establish OSPFv3 routes and end-to-end IPv6 connectivity.
Note: LAN (G0/0) interfaces should not advertise OSPFv3 routing information, but routes to these networks should be contained in the routing tables.
Step 1: Test IPv6 end-to-end connectivity.
From each PC host, ping the IPv6 addresses of the other PC hosts in the topology to verify IPv6 end-to-end connectivity.
Note: It may be necessary to disable the PC firewall to ping between PCs.
Step 2: Verify that IPv6 unicast routing has been enabled on all routers.
a. An easy way to verify that IPv6 routing has been enabled on a router is to use the show run | section ipv6 unicast command. By adding this pipe (|) section to the show run command, the ipv6 unicast-routing command displays if IPv6 routing has been enabled.
Note: The show run command can also be issued without any pipe, and then a manual search for the ipv6 unicast-routing command can be done.
Issue the command on each router. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R3 does not have ipv6 unicast routing enabled.
R1# show run | section ipv6 unicast
ipv6 unicast-routing
R2# show run | section ipv6 unicast
ipv6 unicast-routing
R3# show run | section ipv6 unicast
R3#
b. If IPv6 unicast routing is not enabled on one or more routers, enable it now. Record the commands used to correct the issues.
____________________________________________________________________________________
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 31
____________________________________________________________________________________
R3(config)# ipv6 unicast-routing
Step 3: Verify that all interfaces are assigned to OSPFv3 area 0 on R1.
a. Issue the show ipv6 protocols command and verify that the router ID is correct. Also verify that the expected interfaces are displayed under area 0.
Note: If no output is generated from this command, then the OSPFv3 process has not been configured.
Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Router ID is correct. The network for G0/0 interface is advertised in the OSPFv3 process.
R1# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ospf 1"
Router ID 1.1.1.1
Number of areas: 1 normal, 0 stub, 0 nssa
Interfaces (Area 0):
Serial0/0/1
Serial0/0/0
Redistribution:
None
IPv6 Routing Protocol is "ND"
b. Make the necessary configuration changes to R1. Record the commands used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# interface g0/0
R1(config-if)# ipv6 ospf 1 area 0
c. Issue the clear ipv6 ospf process command if necessary.
d. Re-issue the show ipv6 protocols command to verify that your changes had the desired effect.
e. Issue the show ipv6 ospf interface brief command to verify that all interfaces are listed as OSPF networks assigned to area 0.
f. Issue the show ipv6 ospf interface g0/0 command to verify that this interface is set not to advertise OSPFv3 routes.
R1# show ipv6 ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Link Local Address FE80::1, Interface ID 3
Area 0, Process ID 1, Instance ID 0, Router ID 1.1.1.1
Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State WAITING, Priority 1
No designated router on this network
No backup designated router on this network
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 31
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
No Hellos (Passive interface)
Wait time before Designated router selection 00:00:23
Graceful restart helper support enabled
Index 1/3/3, flood queue length 0
Next 0x0(0)/0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
g. Resolve any problems discovered on R1. List any additional changes made to R1. If no problems were found on the device, then respond with “no problems were found”.
____________________________________________________________________________________
No problems were found, G0/0 is already a passive OSPFv3 interface.
Step 4: Verify that all interfaces are assigned to OSPFv3 area 0 on R2.
a. Issue the show ipv6 protocols command and verify the router ID is correct. Also verify that the expected interfaces display under area 0.
Note: If no output is generated from this command, then the OSPFv3 process has not been configured.
Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Router ID is correct, interfaces G0/0 & S0/0/1 are missing
R2# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ospf 1"
Router ID 2.2.2.2
Number of areas: 1 normal, 0 stub, 0 nssa
Interfaces (Area 0):
Serial0/0/0
Redistribution:
None
IPv6 Routing Protocol is "ND"
b. Make the necessary configuration changes to R2. Record the commands used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R2(config)# interface g0/0
R2(config-if)# ipv6 ospf 1 area 0
R2(config-if)# interface s0/0/1
R2(config-if)# ipv6 ospf 1 area 0
c. Issue the clear ipv6 ospf process command if necessary.
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 31
d. Re-issue the show ipv6 protocols command to verify that your changes had the desired effect.
e. Issue the show ipv6 ospf interface brief command to verify that all interfaces are listed as OSPF networks assigned to area 0.
f. Issue the show ipv6 ospf interface g0/0 command to verify that this interface is not set to advertise OSPFv3 routes.
R2# show ipv6 ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Link Local Address FE80::2, Interface ID 3
Area 0, Process ID 1, Instance ID 0, Router ID 2.2.2.2
Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State WAITING, Priority 1
No designated router on this network
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:04
Wait time before Designated router selection 00:00:05
Graceful restart helper support enabled
Index 1/2/2, flood queue length 0
Next 0x0(0)/0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
g. List any additional changes made to R2. If no problems were found on the device, then respond with “no problems were found”.
____________________________________________________________________________________
R2(config)# ipv6 router ospf 1
R2(config-rtr)# passive-interface g0/0
Step 5: Verify that all interfaces are assigned to OSPFv3 area 0 on R3.
a. Issue the show ipv6 protocols command and verify that the router ID is correct. Also verify that the expected interfaces display under area 0.
Note: If no output is generated from this command, then the OSPFv3 process has not been configured.
Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
OSPFv3 has not been configured on this router.
R3# show ipv6 protocols
b. Make the necessary configuration changes to R3. Record the commands used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 31
R3(config)# ipv6 router ospf 1
R3(config-rtr)# router-id 3.3.3.3
R3(config-rtr)# passive-interface g0/0
R3(config-rtr)# interface g0/0
R3(config-if)# ipv6 ospf 1 area 0
R3(config-if)# interface s0/0/0
R3(config-if)# ipv6 ospf 1 area 0
R3(config-if)# interface s0/0/1
R3(config-if)# ipv6 ospf 1 area 0
c. Issue the clear ipv6 ospf process command if necessary.
d. Re-issue the show ipv6 protocols command to verify that your changes had the desired effect.
e. Issue the show ipv6 ospf interface brief command to verify that all interfaces are listed as OSPF networks assigned to area 0.
f. Issue the show ipv6 ospf interface g0/0 command to verify that this interface is set not to advertise OSPFv3 routes.
R3# show ipv6 ospf interface g0/0
GigabitEthernet0/0 is up, line protocol is up
Link Local Address FE80::3, Interface ID 3
Area 0, Process ID 1, Instance ID 0, Router ID 3.3.3.3
Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 3.3.3.3, local address FE80::3
No backup designated router on this network
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
No Hellos (Passive interface)
Graceful restart helper support enabled
Index 1/1/1, flood queue length 0
Next 0x0(0)/0x0(0)/0x0(0)
Last flood scan length is 0, maximum is 0
Last flood scan time is 0 msec, maximum is 0 msec
Neighbor Count is 0, Adjacent neighbor count is 0
Suppress hello for 0 neighbor(s)
g. Resolve any problems discovered on R3. List any additional changes made to R3. If no problems were found on the device, then respond with “no problems were found”.
____________________________________________________________________________________
No problems were found as long as G0/0 was configured as a passive OSPFv3 interface in Step 5b.
Step 6: Verify that all routers have correct neighbor adjacency information.
a. Issue the show ipv6 ospf neighbor command to verify that adjacencies have formed between neighboring routers.
R1# show ipv6 ospf neighbor
OSPFv3 Router with ID (1.1.1.1) (Process ID 1)
Neighbor ID Pri State Dead Time Interface ID Interface
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 31
3.3.3.3 0 FULL/ - 00:00:34 6 Serial0/0/1
2.2.2.2 0 FULL/ - 00:00:32 6 Serial0/0/0
R2# sh ipv6 ospf neighbor
OSPFv3 Router with ID (2.2.2.2) (Process ID 1)
Neighbor ID Pri State Dead Time Interface ID Interface
3.3.3.3 0 FULL/ - 00:00:32 7 Serial0/0/1
1.1.1.1 0 FULL/ - 00:00:30 6 Serial0/0/0
R3# sh ipv6 ospf neighbor
OSPFv3 Router with ID (3.3.3.3) (Process ID 1)
Neighbor ID Pri State Dead Time Interface ID Interface
2.2.2.2 0 FULL/ - 00:00:32 7 Serial0/0/1
1.1.1.1 0 FULL/ - 00:00:37 7 Serial0/0/0
b. Resolve any OSPFv3 adjacency issues that still exist.
Instructor Note: All adjacency issues should have been resolved in earlier steps.
Step 7: Verify OSPFv3 routing information.
a. Issue the show ipv6 route ospf command, and verify that OSPFv3 routes exist to all non-adjoining networks.
R1# show ipv6 route ospf
IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
O 2001:DB8:ACAD:B::/64 [110/65]
via FE80::2, Serial0/0/0
O 2001:DB8:ACAD:C::/64 [110/65]
via FE80::3, Serial0/0/1
O 2001:DB8:ACAD:23::/64 [110/128]
via FE80::2, Serial0/0/0
via FE80::3, Serial0/0/1
R2# show ipv6 route ospf
IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 31
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
O 2001:DB8:ACAD:A::/64 [110/65]
via FE80::1, Serial0/0/0
O 2001:DB8:ACAD:C::/64 [110/65]
via FE80::3, Serial0/0/1
O 2001:DB8:ACAD:13::/64 [110/128]
via FE80::1, Serial0/0/0
via FE80::3, Serial0/0/1
R3# show ipv6 route ospf
IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
O 2001:DB8:ACAD:A::/64 [110/65]
via FE80::1, Serial0/0/0
O 2001:DB8:ACAD:B::/64 [110/65]
via FE80::2, Serial0/0/1
O 2001:DB8:ACAD:12::/64 [110/128]
via FE80::1, Serial0/0/0
via FE80::2, Serial0/0/1
Are all OSPFv3 routes available? ________ yes
If any OSPFv3 routes are missing, what is missing?
____________________________________________________________________________________
All OSPFv3 routes are present.
b. Resolve any routing issues that still exist.
Instructor Note: All OSPFv3 routes issues should have been resolved.
Step 8: Verify IPv6 end-to-end connectivity.
From each PC, verify that IPv6 end-to-end connectivity exists. PCs should be able to ping each interface on the network. If IPv6 end-to-end connectivity does not exist, then continue troubleshooting to resolve remaining issues.
Note: It may be necessary to disable the PC firewall to ping between PCs.
Reflection
Why would you troubleshoot OSPFv2 and OSPFv3 separately?
_______________________________________________________________________________________
_______________________________________________________________________________________
OSPFv2 and OSPFv3 do not share routing information and their configuration is completely independent. Troubleshooting for these two protocols should be done independently.
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 25 of 31
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs - Final
Router R1
R1#sh run
Building configuration...
Current configuration : 2010 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 26 of 31
no ip domain lookup
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:A::1/64
ipv6 ospf 1 area 0
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.12.1 255.255.255.252
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 ospf 1 area 0
clock rate 128000
!
interface Serial0/0/1
ip address 192.168.13.1 255.255.255.252
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:13::1/64
ipv6 ospf 1 area 0
!
router ospf 1
router-id 1.1.1.1
passive-interface GigabitEthernet0/0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.13.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ipv6 router ospf 1
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 27 of 31
router-id 1.1.1.1
passive-interface GigabitEthernet0/0
!
control-plane
!
banner motd ^CUnauthorized Access is Prohibited!^C
!
line con 0
password 7 060506324F41
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0
password 7 00071A150754
login
transport input all
line vty 1 4
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
R2#sh run
Building configuration...
Current configuration : 2010 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 28 of 31
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.2.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:B::2/64
ipv6 ospf 1 area 0
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.12.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:12::2/64
ipv6 ospf 1 area 0
!
interface Serial0/0/1
ip address 192.168.23.1 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
ipv6 ospf 1 area 0
clock rate 128000
!
router ospf 1
router-id 2.2.2.2
passive-interface GigabitEthernet0/0
network 192.168.2.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
!
ip forward-protocol nd
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 29 of 31
!
no ip http server
no ip http secure-server
!
ipv6 router ospf 1
router-id 2.2.2.2
passive-interface GigabitEthernet0/0
!
control-plane
!
banner motd ^CUnauthorized Access is Prohibited!^C
!
line con 0
password 7 094F471A1A0A
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0
password 7 14141B180F0B
login
transport input all
line vty 1 4
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R3
R3#sh run
Building configuration...
Current configuration : 2049 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R3
!
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 30 of 31
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:C::3/64
ipv6 ospf 1 area 0
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.13.2 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:13::3/64
ipv6 ospf 1 area 0
clock rate 128000
!
interface Serial0/0/1
ip address 192.168.23.2 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:23::3/64
ipv6 ospf 1 area 0
!
router ospf 1
router-id 3.3.3.3
Lab – Troubleshooting Basic Single-Area OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 31 of 31
passive-interface GigabitEthernet0/0
network 192.168.3.0 0.0.0.255 area 0
network 192.168.13.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ipv6 router ospf 1
router-id 3.3.3.3
passive-interface GigabitEthernet0/0
!
control-plane
!
banner motd ^CUnauthorized Access is Prohibited!^C
!
line con 0
password 7 02050D480809
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0
password 7 104D000A0618
login
transport input all
line vty 1 4
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 14
Lab – Troubleshooting Advanced Single-Area OSPFv2 (Instructor
Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 14
Addressing Table
Device Interface IP Address Subnet Mask Default Gateway
R1 G0/0 192.168.1.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.12.1 255.255.255.252 N/A
S0/0/1 192.168.13.1 255.255.255.252 N/A
R2 Lo0 209.165.200.225 255.255.255.252 N/A
S0/0/0 192.168.12.2 255.255.255.252 N/A
S0/0/1 (DCE) 192.168.23.1 255.255.255.252 N/A
R3 G0/0 192.168.3.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.13.2 255.255.255.252 N/A
S0/0/1 192.168.23.2 255.255.255.252 N/A
PC-A NIC 192.168.1.3 255.255.255.0 192.168.1.1
PC-C NIC 192.168.3.3 255.255.255.0 192.168.3.1
Objectives
Part 1: Build the Network and Load Device Configurations
Part 2: Troubleshoot OSPF
Background / Scenario
OSPF is a popular routing protocol used by businesses worldwide. A Network Administrator should be able to isolate OSPF issues and resolve those issues in a timely manner.
In this lab, you will troubleshoot a single-area OSPFv2 network and resolve all issues that exist.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet and serial cables, as shown in the topology
Part 1: Build the Network and Load Device Configurations
In Part 1, you will set up the network topology and configure basic settings on the PC hosts and routers.
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 14
Step 1: Cable the network as shown in the topology.
Step 2: Configure PC hosts.
Step 3: Load router configurations.
Load the following configurations into the appropriate router. All routers have the same passwords. The privileged EXEC password is class. The password for console and vty lines is cisco.
Router R1 Configuration:
conf t
hostname R1
enable secret class
no ip domain lookup
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
no shut
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.1 255.255.255.252
ip ospf message-digest-key 1 md5 MD5LINKS
clock rate 128000
no shut
interface Serial0/0/1
bandwidth 64
! bandwidth 128
ip ospf message-digest-key 1 md5 MD5LINKS
ip address 192.168.13.1 255.255.255.252
no shut
router ospf 1
auto-cost reference-bandwidth 1000
! router-id 1.1.1.1
area 0 authentication message-digest
passive-interface g0/0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.13.0 0.0.0.3 area 0
banner motd ^
Unauthorized Access is Prohibited!
^
line con 0
password cisco
logging synchronous
login
line vty 0 4
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 14
password cisco
login
transport input all
end
Router R2 Configuration:
conf t
hostname R2
enable secret class
no ip domain lookup
interface Loopback0
ip address 209.165.200.225 255.255.255.252
interface Serial0/0/0
bandwidth 182
! bandwidth 128
ip ospf message-digest-key 1 md5 MD5LINKS
ip address 192.168.12.2 255.255.255.252
no shut
interface Serial0/0/1
bandwidth 128
ip ospf message-digest-key 1 md5 MD5LINKS
ip address 192.168.23.1 255.255.255.252
clock rate 128000
no shut
router ospf 1
router-id 2.2.2.2
auto-cost reference-bandwidth 1000
area 0 authentication message-digest
passive-interface g0/0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
! default-information originate
ip route 0.0.0.0 0.0.0.0 Loopback0
banner motd ^
Unauthorized Access is Prohibited!
^
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
transport input all
end
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 14
Router R3 Configuration:
conf t
hostname R3
enable secret class
no ip domain lookup
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
no shut
interface Serial0/0/0
bandwidth 128
ip ospf message-digest-key 1 md5 MD5LINKS
ip address 192.168.13.2 255.255.255.252
clock rate 128000
no shut
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.2 255.255.255.252
! ip ospf message-digest-key 1 md5 MD5LINKS
no shut
router ospf 1
router-id 3.3.3.3
! auto-cost reference-bandwidth 1000
area 0 authentication message-digest
passive-interface g0/0
network 192.168.3.0 0.0.0.255 area 0
network 192.168.13.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
banner motd ^
Unauthorized Access is Prohibited!
^
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
login
transport input all
end
Step 4: Test end-to-end connectivity.
All interfaces should be up and the PCs should be able to ping the default gateway.
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 14
Part 2: Troubleshoot OSPF
In Part 2, verify that all routers have established neighbor adjacencies, and that all network routes are available.
Additional OSPF Requirements:
Each router should have the following router ID assignments:
- R1 Router ID: 1.1.1.1
- R2 Router ID: 2.2.2.2
- R3 Router ID: 3.3.3.3
All serial interface clocking rates should be set at 128 Kb/s and a matching bandwidth setting should be
available to allow OSPF cost metrics to be calculated correctly.
The 1941 routers have Gigabit interfaces, so the default OSPF reference bandwidth should be adjusted
to allow cost metrics to reflect appropriate costs for all interfaces.
OSPF should propagate a default route to the Internet. This is simulated by using Loopback interface 0
on R2.
All interfaces advertising OSPF routing information should be configured with MD5 authentication, using
MD5LINKS as the key.
List the commands used during your OSPF troubleshooting process:
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Answers may vary, but the list of commands can include:
clear ip ospf process
show interface interface
show ip ospf neighbor
show ip route
show ip route ospf
show ip protocols
show ip ospf interface interface
show ip ospf interface brief
show ip ospf database
show ip ospf route
show run
show run | include router ospf
List the changes made to resolve the OSPF issues. If no problems were found on the device, then respond with “no problems were found”.
R1 Router:
_______________________________________________________________________________________
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 14
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
router ospf 1
router-id 1.1.1.1
interface s0/0/1
bandwidth 128
end
clear ip ospf process
R2 Router:
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
router ospf 1
default-information originate
interface s0/0/1
bandwidth 128
end
clear ip ospf process
R3 Router:
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
router ospf 1
auto-cost reference-bandwidth 1000
interface s0/0/1
ip ospf message-digest-key 1 md5 MD5LINKS
end
clear ip ospf process
Reflection
How would you change the network in this lab so all LAN traffic was routed through R2?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Answers may vary, but through the use of the ip ospf cost command the cost for the link between R1 and R3 could be adjusted to a number larger than the accumulated cost of the two serial links between R1 - R2, and R2 - R3. This adjusted cost would need to be applied to both sides of the R1 – R3 serial link.
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 14
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs
Router R1 (Final)
R1#sh run
Building configuration...
Current configuration : 1760 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 14
no ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.1 255.255.255.252
ip ospf message-digest-key 1 md5 MD5LINKS
clock rate 128000
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.13.1 255.255.255.252
ip ospf message-digest-key 1 md5 MD5LINKS
!
router ospf 1
router-id 1.1.1.1
auto-cost reference-bandwidth 1000
area 0 authentication message-digest
passive-interface GigabitEthernet0/0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.12.0 0.0.0.3 area 0
network 192.168.13.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited!
^C
!
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 14
line con 0
password cisco
login
logging synchronous
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2 (Final)
R2#sh run
Building configuration...
Current configuration : 1804 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
interface Loopback0
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 14
ip address 209.165.200.225 255.255.255.252
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.2 255.255.255.252
ip ospf message-digest-key 1 md5 MD5LINKS
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.1 255.255.255.252
ip ospf message-digest-key 1 md5 MD5LINKS
clock rate 128000
!
router ospf 1
router-id 2.2.2.2
auto-cost reference-bandwidth 1000
area 0 authentication message-digest
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
default-information originate
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Loopback0
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited!
^C
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 14
!
line con 0
password cisco
login
logging synchronous
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R3 (Final)
R3#sh run
Building configuration...
Current configuration : 1760 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 14
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.13.2 255.255.255.252
ip ospf message-digest-key 1 md5 MD5LINKS
clock rate 128000
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.2 255.255.255.252
ip ospf message-digest-key 1 md5 MD5LINKS
!
router ospf 1
router-id 3.3.3.3
auto-cost reference-bandwidth 1000
area 0 authentication message-digest
passive-interface GigabitEthernet0/0
network 192.168.3.0 0.0.0.255 area 0
network 192.168.13.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited!
^C
!
line con 0
password cisco
login
Lab – Troubleshooting Advanced Single-Area OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 14
logging synchronous
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 3
OSPF Troubleshooting Mastery (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Explain the process and tools used to troubleshoot a single-area OSPF network.
This activity gives students practice in configuring OSPF and the opportunity to use troubleshooting commands to fix other networks as they were designed.
Scenario
You have decided to change your routing protocol from RIPv2 to OSPFv2. Your small- to medium-sized business network topology will not change from its original physical settings. Use the diagram on the PDF for this activity as your company’s small- to medium- business network design.
Your addressing design is complete and you then configure your routers with IPv4 and VLSM. OSPF has been applied as the routing protocol. However, some routers are sharing routing information with each other and some are not.
Open the PDF file that accompanies this modeling activity and follow the directions to complete the activity.
When the steps in the directions are complete, regroup as a class and compare recorded activity correction times. The group taking the shortest time to find and fix the configuration error will be declared the winner only after successfully explaining how they found the error, fixed it, and proved that the topology is now working.
Required Resources
Topology diagram
Packet Tracer software
Timer
OSPF Troubleshooting Mastery
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 3
Topology Diagram
Directions
Choose a partner from the class with whom to work on this activity. Use Packet Tracer to create the topology
diagram shown for this activity.
Step 1: Build the topology based on the modeling activity page for this scenario.
Step 2: Configure the routers.
a. Use IPv4 for all interfaces.
b. Incorporate VLSM into the addressing scheme.
c. Make one intentional configuration error.
d. Verify that the network does not work based upon the intentional error.
e. Save your file to be used with Step 3.
Step 3: Exchange your Packet Tracer file with another group.
a. Find the configuration error on the Packet Tracer network file you received from another group.
b. Fix the OSPF configuration error so that the network operates fully.
c. Record the time it took to find and fix the OSPF network error.
d. When complete, meet with your class to determine the Master Troubleshooter for the day.
S1
Area 0
R2
R1 R3
G0/0
G0/1
G0/0 G0/0 G0/1 G0/1
OSPF Troubleshooting Mastery
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 3
Instructor Resource Diagram
OSPF answers will vary depending upon student designs and configuration errors.
Some troubleshooting commands include:
show ip ospf neighbor
show ip ospf interface GigabitEthernet 0/0
show ip route
show running config
Identify elements of the model that map to IT-related content:
OSPF network troubleshooting commands
OSPF network configuration commands
IPv4 network addressing
VLSM network addressing
Area 0
R2
R1 R3
G0/0
G0/1
G0/0 G0/0 G0/1 G0/1
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 3
Leaving on a Jet Plane (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Explain the operation of multiarea OSPF to enable internetworking in a small- to medium-sized business network.
This activity will introduce the concept of regular and core areas and their relation to how backbone, area border, internal and autonomous system boundary routers serve to deliver data from internal to external networks.
Scenario
You and a classmate are starting a new airline to serve your continent. In addition to your core area or headquarters airport, you will locate and map four intra-continental airport service areas and one transcontinental airport service area that can be used for additional source and destination travel.
Use the blank world map provided to design your airport locations. Additional instructions for completing this activity can be found in the accompanying PDF.
Required Resources
Blank world map diagram
Word processing software or alternative graphics software for marking airport locations and their
connections
Blank World Map Diagram
Leaving on a Jet Plane
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 3
Directions
Step 1: Design the airport locations.
a. Use the blank world map diagram provided.
b. On your map, place a star in the center of the continent in which you live. This is now the Airport Core Site and will serve as your core transit location. Label it as Airport Core Site. This is your first area of intra-continental service and all airports will be connected to the Airport Core Site.
Step 2: Map airports within your continent to serve your passengers.
a. Map four airport locations within your continent to connect to the Airport Core Site. Call them North, South, East, and West Airport Sites.
b. Place four circles on your continent’s map to represent the North, South, East, and West Airport Sites. Some circles may overlap due to the size of the continent and the sites placement on the map.
c. Draw a straight line from each of these airports to the Airport Core Site. These intra-continent locations are your first level of service for your airlines. They are also known as area border airport sites.
Step 3: Identify another continent your airline will serve.
a. On the world map, locate another continent you would like to provide service to and from the Airlines Core Site.
b. Place a circle in the center of the continent you chose for second-level service. This airport will be called Transcontinental Airport Site.
c. Draw a line from your Airlines Core Site to the Transcontinental Airport Site. This airport will be known as an autonomous system border router (ASBR) airport site.
Summary
After completing Step 3, you should be able to see that the airport connections resemble a network topology. Complete the reflection questions, save your work, and be prepared to share your answers with the class.
Reflection
1. While designing your airline travel routes, did you pay close attention to the headquarters location? Why would it be important to have a core site for airline travel? _______________________________________________________________________________________ Answers will vary. Some groups will mention that most airlines do incorporate a main location to and from which their airplanes fly. The purpose of having a headquarters or a core location allows airlines save costs and time when delivering passengers to and from other locations. Network design also incorporates routers which serve as core delivery areas for network traffic. Some of these routers carry data from many other areas and some carry network traffic from only one area. This type of routing can save costs.
2. Would networks incorporate core, border, and ASBRs into area sites? Justify your answer.
_______________________________________________________________________________________
Answers will vary. If a network is very small, one area will be sufficient to route network traffic. But if there are plans to expand the network, it would be a good idea to map the routers into groups based on functionality and location to make the network scalable.
3. What is the significance of mapping transcontinental areas? _______________________________________________________________________________________ Mapping transcontinental locations allows airlines to know which main intra-continental areas and external extra-continental routes they serve. In routing, this would indicate major internal router locations for a small-
Leaving on a Jet Plane
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 3
to medium-sized business and ISP external connections to route external information to and from your small- to medium-sized business location.
4. What is the significance of mapping internal airline destination routes? Compare this to a routing topology.
_______________________________________________________________________________________ Airlines often will serve fairly close subsidiary airport customers. The same holds true for network data delivery, as sometimes routers are locally situated in order to provide alternate paths or methods (protocols) to be delivered by data routes.
5. Is it possible that the Airlines Core Site could serve several functions for your airlines (network)? Explain your answer.
_______________________________________________________________________________________
Core headquarters can serve as a central location for intra-country routing or external transcontinental routing. The same holds true for core routers, as their purpose is to deliver data traffic to areas to which they are directly connected or provide connections to areas outside of their areas or domains.
Instructor Resource Example
The information listed in this section is only one depiction of what students could see as a result of this activity. Other topology designs may vary per student groups.
Identify elements of the model that map to IT-related content:
Regular, internal routing areas
Core, backbone areas
External, autonomous system boundary or
border router
Border area router
Backbone router
Cost
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 23
Lab - Configuring Multiarea OSPFv2 (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Addressing Table
Device Interface IP Address Subnet Mask
R1 Lo0 209.165.200.225 255.255.255.252
Lo1 192.168.1.1 255.255.255.0
Lo2 192.168.2.1 255.255.255.0
S0/0/0 (DCE) 192.168.12.1 255.255.255.252
R2 Lo6 192.168.6.1 255.255.255.0
S0/0/0 192.168.12.2 255.255.255.252
S0/0/1 (DCE) 192.168.23.1 255.255.255.252
R3 Lo4 192.168.4.1 255.255.255.0
Lo5 192.168.5.1 255.255.255.0
S0/0/1 192.168.23.2 255.255.255.252
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Configure a Multiarea OSPFv2 Network
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 23
Part 3: Configure Interarea Summary Routes
Background / Scenario
To make OSPF more efficient and scalable, OSPF supports hierarchical routing using the concept of areas. An OSPF area is a group of routers that share the same link-state information in their link-state databases (LSDBs). When a large OSPF area is divided into smaller areas, it is called multiarea OSPF. Multiarea OSPF is useful in larger network deployments to reduce processing and memory overhead.
In the lab, you will configure a multiarea OSPFv2 network with interarea summary routes.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
Console cables to configure the Cisco IOS devices via the console ports
Serial cables as shown in the topology
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you will set up the network topology and configure basic settings on the routers.
Step 1: Cable the network as shown in the topology.
Step 2: Initialize and reload the routers as necessary.
Step 3: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure device name, as shown in the topology.
c. Assign class as the privileged EXEC password.
d. Assign cisco as the console and vty passwords.
e. Configure logging synchronous for the console line.
f. Configure an MOTD banner to warn users that unauthorized access is prohibited.
g. Configure the IP addresses listed in the Addressing Table for all interfaces. DCE interfaces should be configured with a clock rate of 128000. Bandwidth should be set to 128 Kb/s on all serial interfaces.
h. Copy the running configuration to the startup configuration.
Step 4: Verify Layer 3 connectivity.
Use the show ip interface brief command to verify that the IP addressing is correct and that the interfaces are active. Verify that each router can ping their neighbor’s serial interface.
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 23
Part 2: Configure a Multiarea OSPFv2 Network
In Part 2, you will configure a multiarea OSPFv2 network with process ID of 1. All LAN loopback interfaces should be passive, and all serial interfaces should be configured with MD5 authentication using Cisco123 as the key.
Step 1: Identify the OSPF router types in the topology.
Identify the Backbone router(s): ______________________ R1 and R2
Identify the Autonomous System Boundary Router(s) (ASBR): __________________ R1
Identify the Area Border Router(s) (ABR): ____________________ R1 and R2
Identify the Internal router(s): _______________________ R3
Step 2: Configure OSPF on R1.
a. Configure a router ID of 1.1.1.1 with OSPF process ID of 1.
R1(config)# router ospf 1
R1(config-router)# router-id 1.1.1.1
b. Add the networks for R1 to OSPF.
R1(config-router)# network 192.168.1.0 0.0.0.255 area 1
R1(config-router)# network 192.168.2.0 0.0.0.255 area 1
R1(config-router)# network 192.168.12.0 0.0.0.3 area 0
c. Set all LAN loopback interfaces, Lo1 and Lo2, as passive.
R1(config-router)# passive-interface lo1
R1(config-router)# passive-interface lo2
R1(config-router)# exit
d. Create a default route to the Internet using exit interface Lo0.
R1(config)# ip route 0.0.0.0 0.0.0.0 lo0
Note: You may see the “%Default route without gateway, if not a point-to-point interface, may impact performance” message. This is normal behavior if using a Loopback interface to simulate a default route.
e. Configure OSPF to propagate the routes throughout the OSPF areas.
R1(config)# router ospf 1
R1(config-router)# default-information originate
Step 3: Configure OSPF on R2.
a. Configure a router ID of 2.2.2.2 with OSPF process ID of 1.
R2(config)# router ospf 1
R2(config-router)# router-id 2.2.2.2
b. Add the networks for R2 to OSPF. Add the networks to the correct area. Write the commands used in the space below.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R2(config-router)# network 192.168.12.0 0.0.0.3 area 0
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 23
R2(config-router)# network 192.168.23.0 0.0.0.3 area 3
R2(config-router)# network 192.168.6.0 0.0.0.255 area 3
c. Set all LAN loopback interfaces as passive.
R2(config-router)# passive-interface lo6
Step 4: Configure OSPF on R3.
a. Configure a router ID of 3.3.3.3 with OSPF process ID of 1.
R3(config)# router ospf 1
R3(config-router)# router-id 3.3.3.3
b. Add the networks for R3 to OSPF. Write the commands used in the space below.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R3(config-router)# network 192.168.23.0 0.0.0.3 area 3
R3(config-router)# network 192.168.4.0 0.0.0.255 area 3
R3(config-router)# network 192.168.5.0 0.0.0.255 area 3
c. Set all LAN loopback interfaces as passive.
R3(config-router)# passive-interface lo4
R3(config-router)# passive-interface l05
Step 5: Verify that OSPF settings are correct and adjacencies have been established between
routers.
a. Issue the show ip protocols command to verify OSPF settings on each router. Use this command
to identify the OSPF router types and to determine the networks assigned to each area.
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 1.1.1.1
It is an area border and autonomous system boundary router
Redistributing External Routes from,
Number of areas in this router is 2. 2 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.1.0 0.0.0.255 area 1
192.168.2.0 0.0.0.255 area 1
192.168.12.0 0.0.0.3 area 0
Passive Interface(s):
Loopback1
Loopback2
Routing Information Sources:
Gateway Distance Last Update
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 23
2.2.2.2 110 00:01:45
Distance: (default is 110)
R2# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 2.2.2.2
It is an area border router
Number of areas in this router is 2. 2 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.6.0 0.0.0.255 area 3
192.168.12.0 0.0.0.3 area 0
192.168.23.0 0.0.0.3 area 3
Passive Interface(s):
Loopback6
Routing Information Sources:
Gateway Distance Last Update
3.3.3.3 110 00:01:20
1.1.1.1 110 00:10:12
Distance: (default is 110)
R3# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 3.3.3.3
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.4.0 0.0.0.255 area 3
192.168.5.0 0.0.0.255 area 3
192.168.23.0 0.0.0.3 area 3
Passive Interface(s):
Loopback4
Loopback5
Routing Information Sources:
Gateway Distance Last Update
1.1.1.1 110 00:07:46
2.2.2.2 110 00:07:46
Distance: (default is 110)
What is the OSPF router type for each router?
R1: ______________________________________________________________________________
R2: ______________________________________________________________________________
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 23
R3: ______________________________________________________________________________
R1 - ABR and ASBR
R2 - ABR
R3 - No special OSPF router type
b. Issue the show ip ospf neighbor command to verify that OSPF adjacencies have been established between routers.
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
2.2.2.2 0 FULL/ - 00:00:34 192.168.12.2 Serial0/0/0
R2# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
1.1.1.1 0 FULL/ - 00:00:36 192.168.12.1 Serial0/0/0
3.3.3.3 0 FULL/ - 00:00:36 192.168.23.2 Serial0/0/1
R3# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
2.2.2.2 0 FULL/ - 00:00:38 192.168.23.1 Serial0/0/1
c. Issue the show ip ospf interface brief command to display a summary of interface route costs.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/0 1 0 192.168.12.1/30 781 P2P 1/1
Lo1 1 1 192.168.1.1/24 1 LOOP 0/0
Lo2 1 1 192.168.2.1/24 1 LOOP 0/0
R2# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/0 1 0 192.168.12.2/30 781 P2P 1/1
Lo6 1 3 192.168.6.1/24 1 LOOP 0/0
Se0/0/1 1 3 192.168.23.1/30 781 P2P 1/1
R3# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Lo4 1 3 192.168.4.1/24 1 LOOP 0/0
Lo5 1 3 192.168.5.1/24 1 LOOP 0/0
Se0/0/1 1 3 192.168.23.2/30 781 P2P 1/1
Step 6: Configure MD5 authentication on all serial interfaces.
Configure OSPF MD5 authentication at the interface level with an authentication key of Cisco123.
R1(config)# interface s0/0/0
R1(config-if)# ip ospf message-digest-key 1 md5 Cisco123
R1(config-if)# ip ospf authentication message-digest
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 23
R2(config)# int s0/0/0
R2(config-if)# ip ospf message-digest-key 1 md5 Cisco123
R2(config-if)# ip ospf authentication message-digest
R2(config-if)# interface s0/0/1
R2(config-if)# ip ospf message-digest-key 1 md5 Cisco123
R2(config-if)# ip ospf authentication message-digest
R3(config)# interface s0/0/1
R3(config-if)# ip ospf message-digest-key 1 md5 Cisco123
R3(config-if)# ip ospf authentication message-digest
Why is it a good idea to verify that OSPF is functioning correctly before configuring OSPF authentication?
_______________________________________________________________________________________
_______________________________________________________________________________________
Troubleshooting OSPF problems is much easier if OSPF adjacencies have been established and verified before implementing authentication. You then know that your authentication implementation is flawed, as adjacencies do not re-establish.
Step 7: Verify OSPF adjacencies have been re-established.
Issue the show ip ospf neighbor command again to verify that adjacencies have been re-established after MD5 authentication was implemented. Troubleshoot any issues found before moving on to Part 3.
Part 3: Configure Interarea Summary Routes
OSPF does not perform automatic summarization. Interarea summarization must be manually configured on ABRs. In Part 3, you will apply interarea summary routes on the ABRs. Using show commands, you will be able to observe how summarization affects the routing table and LSDBs.
Step 1: Display the OSPF routing tables on all routers.
a. Issue the show ip route ospf command on R1. OSPF routes that originate from a different area have a descriptor (O IA) indicating that these are interarea routes.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
192.168.4.0/32 is subnetted, 1 subnets
O IA 192.168.4.1 [110/1563] via 192.168.12.2, 00:23:49, Serial0/0/0
192.168.5.0/32 is subnetted, 1 subnets
O IA 192.168.5.1 [110/1563] via 192.168.12.2, 00:23:49, Serial0/0/0
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 23
192.168.23.0/30 is subnetted, 1 subnets
O IA 192.168.6.1 [110/782] via 192.168.12.2, 00:02:01, Serial0/0/0
192.168.23.0/30 is subnetted, 1 subnets
O IA 192.168.23.0 [110/1562] via 192.168.12.2, 00:23:49, Serial0/0/0
b. Repeat the show ip route ospf command for R2 and R3. Record the OSPF interarea routes for each router.
R2:
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
O IA 192.168.1.1 [110/782] via 192.168.12.1, 00:25:22, Serial0/0/0
O IA 192.168.2.1 [110/782] via 192.168.12.1, 00:25:22, Serial0/0/0
R3:
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
O IA 192.168.1.1 [110/1563] via 192.168.23.1, 00:30:41, Serial0/0/1
O IA 192.168.2.1 [110/1563] via 192.168.23.1, 00:30:41, Serial0/0/1
O IA 192.168.12.0 [110/1562] via 192.168.23.1, 01:40:46, Serial0/0/1
R2# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 192.168.12.1 to network 0.0.0.0
O*E2 0.0.0.0/0 [110/1] via 192.168.12.1, 00:25:22, Serial0/0/0
192.168.1.0/32 is subnetted, 1 subnets
O IA 192.168.1.1 [110/782] via 192.168.12.1, 00:25:22, Serial0/0/0
192.168.2.0/32 is subnetted, 1 subnets
O IA 192.168.2.1 [110/782] via 192.168.12.1, 00:25:22, Serial0/0/0
192.168.4.0/32 is subnetted, 1 subnets
O 192.168.4.1 [110/782] via 192.168.23.2, 01:35:23, Serial0/0/1
192.168.5.0/32 is subnetted, 1 subnets
O 192.168.5.1 [110/782] via 192.168.23.2, 01:35:23, Serial0/0/1
R3# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 23
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 192.168.23.1 to network 0.0.0.0
O*E2 0.0.0.0/0 [110/1] via 192.168.23.1, 00:30:36, Serial0/0/1
192.168.1.0/32 is subnetted, 1 subnets
O IA 192.168.1.1 [110/1563] via 192.168.23.1, 00:30:41, Serial0/0/1
192.168.2.0/32 is subnetted, 1 subnets
O IA 192.168.2.1 [110/1563] via 192.168.23.1, 00:30:41, Serial0/0/1
192.168.12.0/30 is subnetted, 1 subnets
O 192.168.6.1 [110/782] via 192.168.23.1, 00:00:38, Serial0/0/1
192.168.12.0/30 is subnetted, 1 subnets
O IA 192.168.12.0 [110/1562] via 192.168.23.1, 01:40:46, Serial0/0/1
Step 2: Display the LSDB on all routers.
a. Issue the show ip ospf database command on R1. A router maintains a separate LSDB for every area that it is a member.
R1# show ip ospf database
OSPF Router with ID (1.1.1.1) (Process ID 1)
Router Link States (Area 0)
Link ID ADV Router Age Seq# Checksum Link count
1.1.1.1 1.1.1.1 1295 0x80000003 0x0039CD 2
2.2.2.2 2.2.2.2 1282 0x80000002 0x00D430 2
Summary Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
192.168.1.1 1.1.1.1 1387 0x80000002 0x00AC1F
192.168.2.1 1.1.1.1 1387 0x80000002 0x00A129
192.168.4.1 2.2.2.2 761 0x80000001 0x000DA8
192.168.5.1 2.2.2.2 751 0x80000001 0x0002B2
192.168.6.1 2.2.2.2 1263 0x80000001 0x00596A
192.168.23.0 2.2.2.2 1273 0x80000001 0x00297E
Router Link States (Area 1)
Link ID ADV Router Age Seq# Checksum Link count
1.1.1.1 1.1.1.1 1342 0x80000006 0x0094A4 2
Summary Net Link States (Area 1)
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 23
Link ID ADV Router Age Seq# Checksum
192.168.4.1 1.1.1.1 760 0x80000001 0x00C8E0
192.168.5.1 1.1.1.1 750 0x80000001 0x00BDEA
192.168.6.1 1.1.1.1 1262 0x80000001 0x0015A2
192.168.12.0 1.1.1.1 1387 0x80000001 0x00C0F5
192.168.23.0 1.1.1.1 1272 0x80000001 0x00E4B6
Type-5 AS External Link States
Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 1.1.1.1 1343 0x80000001 0x001D91 1
b. Repeat the show ip ospf database command for R2 and R3. Record the Link IDs for the Summary Net Link States for each area.
R2:
____________________________________________________________________________________
____________________________________________________________________________________
Area 0 - 192.168.1.1, 192.168.2.1, 192.168.4.1, 192.168.5.1, 192.168.6.1, 192.168.23.0
Area 3 – 192.168.1.1, 192.168.2.1, 192.168.12.0
R3:
____________________________________________________________________________________
____________________________________________________________________________________
Area 3 - 192.168.1.1, 192.168.2.1, 192.168.12.0
R2# show ip ospf database
OSPF Router with ID (2.2.2.2) (Process ID 1)
Router Link States (Area 0)
Link ID ADV Router Age Seq# Checksum Link count
1.1.1.1 1.1.1.1 1444 0x80000003 0x0039CD 2
2.2.2.2 2.2.2.2 1429 0x80000002 0x00D430 2
Summary Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
192.168.1.1 1.1.1.1 1535 0x80000002 0x00AC1F
192.168.2.1 1.1.1.1 1535 0x80000002 0x00A129
192.168.4.1 2.2.2.2 908 0x80000001 0x000DA8
192.168.5.1 2.2.2.2 898 0x80000001 0x0002B2
192.168.6.1 2.2.2.2 1410 0x80000001 0x00596A
192.168.23.0 2.2.2.2 1420 0x80000001 0x00297E
Router Link States (Area 3)
Link ID ADV Router Age Seq# Checksum Link count
2.2.2.2 2.2.2.2 1212 0x80000003 0x00DE86 3
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 23
3.3.3.3 3.3.3.3 892 0x80000005 0x00DB05 4
Summary Net Link States (Area 3)
Link ID ADV Router Age Seq# Checksum
192.168.1.1 2.2.2.2 1420 0x80000002 0x002C8B
192.168.2.1 2.2.2.2 1420 0x80000002 0x002195
192.168.12.0 2.2.2.2 1420 0x80000002 0x00A011
Summary ASB Link States (Area 3)
Link ID ADV Router Age Seq# Checksum
1.1.1.1 2.2.2.2 1420 0x80000002 0x00AC72
Type-5 AS External Link States
Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 1.1.1.1 1492 0x80000001 0x001D91 1
R3# show ip ospf database
OSPF Router with ID (3.3.3.3) (Process ID 1)
Router Link States (Area 3)
Link ID ADV Router Age Seq# Checksum Link count
2.2.2.2 2.2.2.2 1251 0x80000003 0x00DE86 3
3.3.3.3 3.3.3.3 930 0x80000005 0x00DB05 4
Summary Net Link States (Area 3)
Link ID ADV Router Age Seq# Checksum
192.168.1.1 2.2.2.2 1459 0x80000002 0x002C8B
192.168.2.1 2.2.2.2 1459 0x80000002 0x002195
192.168.12.0 2.2.2.2 1459 0x80000002 0x00A011
Summary ASB Link States (Area 3)
Link ID ADV Router Age Seq# Checksum
1.1.1.1 2.2.2.2 1459 0x80000002 0x00AC72
Type-5 AS External Link States
Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 1.1.1.1 1531 0x80000001 0x001D91 1
Step 3: Configure the interarea summary routes.
a. Calculate the summary route for the networks in area 1.
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 23
Networks 192.168.1.0 and 192.168.2.0 can be summarized as 192.168.0.0/22.
b. Configure the summary route for area 1 on R1.
R1(config)# router ospf 1
R1(config-router)# area 1 range 192.168.0.0 255.255.252.0
c. Calculate the summary route for the networks in area 3. Record your results.
____________________________________________________________________________________
Networks 192.168.4.0, 192.168.5.0, and 192.168.6.0 can be summarized as 192.168.4.0/22.
d. Configure the summary route for area 3 on R2. Write the commands you used in the space below.
____________________________________________________________________________________
____________________________________________________________________________________
R2(config)# router ospf 1
R2(config-router)# area 3 range 192.168.4.0 255.255.252.0
Step 4: Re-display the OSPF routing tables on all routers.
Issue the show ip route ospf command on each router. Record the results for the summary and interarea routes.
R1:
_______________________________________________________________________________________
_______________________________________________________________________________________
O IA 192.168.4.0/22 [110/782] via 192.168.12.2, 00:04:04, Serial0/0/0
O IA 192.168.23.0 [110/1562] via 192.168.12.2, 00:06:31, Serial0/0/0
R2:
_______________________________________________________________________________________
_______________________________________________________________________________________
O IA 192.168.0.0/22 [110/782] via 192.168.12.1, 00:04:42, Serial0/0/0
O 192.168.4.0/22 is a summary, 00:04:42, Null0
R3:
_______________________________________________________________________________________
_______________________________________________________________________________________
O IA 192.168.0.0/22 [110/1563] via 192.168.23.1, 00:08:01, Serial0/0/1
O IA 192.168.12.0 [110/1562] via 192.168.23.1, 00:53:17, Serial0/0/1
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 23
O 192.168.0.0/22 is a summary, 00:06:31, Null0
O IA 192.168.4.0/22 [110/782] via 192.168.12.2, 00:04:04, Serial0/0/0
192.168.23.0/30 is subnetted, 1 subnets
O IA 192.168.23.0 [110/1562] via 192.168.12.2, 00:06:31, Serial0/0/0
R2# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 192.168.12.1 to network 0.0.0.0
O*E2 0.0.0.0/0 [110/1] via 192.168.12.1, 00:04:42, Serial0/0/0
O IA 192.168.0.0/22 [110/782] via 192.168.12.1, 00:04:42, Serial0/0/0
O 192.168.4.0/22 is a summary, 00:04:42, Null0
192.168.4.0/32 is subnetted, 1 subnets
O 192.168.4.1 [110/782] via 192.168.23.2, 00:04:42, Serial0/0/1
192.168.5.0/32 is subnetted, 1 subnets
O 192.168.5.1 [110/782] via 192.168.23.2, 00:04:42, Serial0/0/1
R3# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 192.168.23.1 to network 0.0.0.0
O*E2 0.0.0.0/0 [110/1] via 192.168.23.1, 00:53:17, Serial0/0/1
O IA 192.168.0.0/22 [110/1563] via 192.168.23.1, 00:08:01, Serial0/0/1
192.168.6.0/32 is subnetted, 1 subnets
O 192.168.6.1 [110/782] via 192.168.23.1, 00:53:17, Serial0/0/1
192.168.12.0/30 is subnetted, 1 subnets
O IA 192.168.12.0 [110/1562] via 192.168.23.1, 00:53:17, Serial0/0/1
Step 5: Display the LSDB on all routers.
Issue the show ip ospf database command again on each router. Record the Link IDs for the Summary Net Link States for each area.
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 23
R1:
_______________________________________________________________________________________
_______________________________________________________________________________________
Area 0 - 192.168.0.0, 192.168.4.0, 192.168.23.0
Area 1 – 192.168.4.0, 192.168.12.0, 192.168.23.0
R2:
_______________________________________________________________________________________
_______________________________________________________________________________________
Area 0 - 192.168.0.0, 192.168.4.0, 192.168.23.0
Area 3 - 192.168.0.0, 192.168.12.0
R3:
_______________________________________________________________________________________
_______________________________________________________________________________________
Area 3 - 192.168.0.0, 192.168.12.0
R1# show ip ospf database
OSPF Router with ID (1.1.1.1) (Process ID 1)
Router Link States (Area 0)
Link ID ADV Router Age Seq# Checksum Link count
1.1.1.1 1.1.1.1 1452 0x80000006 0x0033D0 2
2.2.2.2 2.2.2.2 1451 0x80000005 0x00CE33 2
Summary Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
192.168.0.0 1.1.1.1 807 0x80000001 0x00B41D
192.168.4.0 2.2.2.2 660 0x80000001 0x006A5F
192.168.23.0 2.2.2.2 1753 0x80000002 0x00277F
Router Link States (Area 1)
Link ID ADV Router Age Seq# Checksum Link count
1.1.1.1 1.1.1.1 1871 0x80000007 0x0092A5 2
Summary Net Link States (Area 1)
Link ID ADV Router Age Seq# Checksum
192.168.4.0 1.1.1.1 659 0x80000001 0x002697
192.168.12.0 1.1.1.1 1871 0x80000002 0x00BEF6
192.168.23.0 1.1.1.1 1449 0x80000004 0x00DEB9
Type-5 AS External Link States
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 23
Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 1.1.1.1 1871 0x80000002 0x001B92 1
R2# show ip ospf database
OSPF Router with ID (2.2.2.2) (Process ID 1)
Router Link States (Area 0)
Link ID ADV Router Age Seq# Checksum Link count
1.1.1.1 1.1.1.1 1467 0x80000006 0x0033D0 2
2.2.2.2 2.2.2.2 1464 0x80000005 0x00CE33 2
Summary Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
192.168.0.0 1.1.1.1 821 0x80000001 0x00B41D
192.168.4.0 2.2.2.2 673 0x80000001 0x006A5F
192.168.23.0 2.2.2.2 1766 0x80000002 0x00277F
Router Link States (Area 3)
Link ID ADV Router Age Seq# Checksum Link count
2.2.2.2 2.2.2.2 1521 0x80000004 0x00DC87 3
3.3.3.3 3.3.3.3 1295 0x80000006 0x00D906 4
Summary Net Link States (Area 3)
Link ID ADV Router Age Seq# Checksum
192.168.0.0 2.2.2.2 820 0x80000001 0x003489
192.168.12.0 2.2.2.2 1766 0x80000003 0x009E12
Summary ASB Link States (Area 3)
Link ID ADV Router Age Seq# Checksum
1.1.1.1 2.2.2.2 1766 0x80000003 0x00AA73
Type-5 AS External Link States
Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 1.1.1.1 1886 0x80000002 0x001B92 1
R3# show ip ospf database
OSPF Router with ID (3.3.3.3) (Process ID 1)
Router Link States (Area 3)
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 23
Link ID ADV Router Age Seq# Checksum Link count
2.2.2.2 2.2.2.2 1548 0x80000004 0x00DC87 3
3.3.3.3 3.3.3.3 1320 0x80000006 0x00D906 4
Summary Net Link States (Area 3)
Link ID ADV Router Age Seq# Checksum
192.168.0.0 2.2.2.2 847 0x80000001 0x003489
192.168.12.0 2.2.2.2 1793 0x80000003 0x009E12
Summary ASB Link States (Area 3)
Link ID ADV Router Age Seq# Checksum
1.1.1.1 2.2.2.2 1793 0x80000003 0x00AA73
Type-5 AS External Link States
Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 1.1.1.1 1913 0x80000002 0x001B92 1
What type of LSA is injected into the backbone by the ABR when interarea summarization is enabled?
_______________________________________________________________________________________
A type-3 LSA or an interarea summary route.
Step 6: Verify end-to-end connectivity.
Verify that all networks can be reached from each router. If any issues exist, troubleshoot until they have been resolved.
Reflection
What are three advantages for designing a network with multiarea OSPF?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
1. Smaller routing tables. 2. Reduced link-state update overhead. 3. Reduced frequency of SPF calculations.
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 23
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs - Final
Router R1
R1# show run
Building configuration...
Current configuration : 2062 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 23
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
interface Loopback0
ip address 209.165.200.225 255.255.255.252
!
interface Loopback1
ip address 192.168.1.1 255.255.255.0
!
interface Loopback2
ip address 192.168.2.1 255.255.255.0
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.1 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 Cisco123
clock rate 128000
!
interface Serial0/0/1
no ip address
shutdown
!
router ospf 1
router-id 1.1.1.1
area 1 range 192.168.0.0 255.255.252.0
passive-interface Loopback1
passive-interface Loopback2
network 192.168.1.0 0.0.0.255 area 1
network 192.168.2.0 0.0.0.255 area 1
network 192.168.12.0 0.0.0.3 area 0
default-information originate
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 23
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Loopback0
!
control-plane
!
!
banner motd @
Unauthorized Access is Prohibited! @
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
R2# show run
Building configuration...
Current configuration : 1905 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 23
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
interface Loopback6
ip address 192.168.6.1 255.255.255.0
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.2 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 Cisco123
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.1 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 Cisco123
clock rate 128000
!
router ospf 1
router-id 2.2.2.2
area 3 range 192.168.4.0 255.255.252.0
passive-interface Loopback6
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 23
network 192.168.6.0 0.0.0.255 area 3
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 3
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd @
Unauthorized Access is Prohibited! @
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R3
R3# show run
Building configuration...
Current configuration : 1958 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 23
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
interface Loopback4
ip address 192.168.4.1 255.255.255.0
!
interface Loopback5
ip address 192.168.5.1 255.255.255.0
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.2 255.255.255.252
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 Cisco123
!
router ospf 1
router-id 3.3.3.3
Lab - Configuring Multiarea OSPFv2
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 23
passive-interface Loopback4
passive-interface Loopback5
network 192.168.4.0 0.0.0.255 area 3
network 192.168.5.0 0.0.0.255 area 3
network 192.168.23.0 0.0.0.3 area 3
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd @
Unauthorized Access is Prohibited! @
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 19
Lab - Configuring Multiarea OSPFv3 (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 19
Addressing Table
Device Interface IPv6 Address Default Gateway
R1 S0/0/0 (DCE) 2001:DB8:ACAD:12::1/64
FE80::1 link-local N/A
Lo0 2001:DB8:ACAD::1/64 N/A
Lo1 2001:DB8:ACAD:1::1/64 N/A
Lo2 2001:DB8:ACAD:2::1/64 N/A
Lo3 2001:DB8:ACAD:3::1/64 N/A
R2 S0/0/0 2001:DB8:ACAD:12::2/64
FE80::2 link-local N/A
S0/0/1 (DCE) 2001:DB8:ACAD:23::2/64
FE80::2 link-local N/A
Lo8 2001:DB8:ACAD:8::1/64 N/A
R3 S0/0/1 2001:DB8:ACAD:23::3/64
FE80::3 link-local N/A
Lo4 2001:DB8:ACAD:4::1/64 N/A
Lo5 2001:DB8:ACAD:5::1/64 N/A
Lo6 2001:DB8:ACAD:6::1/64 N/A
Lo7 2001:DB8:ACAD:7::1/64 N/A
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Configure Multiarea OSPFv3 Routing
Part 3: Configure Interarea Route Summarization
Background / Scenario
Using multiarea OSPFv3 in large IPv6 network deployments can reduce router processing by creating smaller routing tables and requiring less memory overhead. In multiarea OSPFv3, all areas are connected to the backbone area (area 0) through area border routers (ABRs).
In this lab, you will implement OSPFv3 routing for multiple areas and configure interarea route summarizations on the Area Border Routers (ABRs). You will also use a number of show commands to display and verify OSPFv3 routing information. This lab uses loopback addresses to simulate networks in multiple OSPFv3 areas.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at this end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 19
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Serial cables as shown in the topology
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you will set up the network topology and configure basic settings on the routers.
Step 1: Cable the network as shown in the topology.
Step 2: Initialize and reload the routers as necessary.
Step 3: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure device name as shown in the topology.
c. Assign class as the privileged EXEC password.
d. Assign cisco as the vty password.
e. Configure a MOTD banner to warn users that unauthorized access is prohibited.
f. Configure logging synchronous for the console line.
g. Encrypt plain text passwords.
h. Configure the IPv6 unicast and link-local addresses listed in the Addressing Table for all interfaces.
i. Enable IPv6 unicast routing on each router.
j. Copy the running configuration to the startup configuration.
Step 4: Test connectivity.
The routers should be able to ping one another. The routers are unable to ping distant loopbacks until OSPFv3 routing is configured. Verify and troubleshoot if necessary.
Part 2: Configure Multiarea OSPFv3 Routing
In Part 2, you will configure OSPFv3 routing on all routers to separate the network domain into three distinct areas, and then verify that routing tables are updated correctly.
Step 1: Assign router IDs.
a. On R1, issue the ipv6 router ospf command to start an OSPFv3 process on the router.
R1(config)# ipv6 router ospf 1
Note: The OSPF process ID is kept locally and has no meaning to other routers on the network.
b. Assign the OSPFv3 router ID 1.1.1.1 to R1.
R1(config-rtr)# router-id 1.1.1.1
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 19
c. Assign a router ID of 2.2.2.2 to R2 and a router ID of 3.3.3.3 to R3.
d. Issue the show ipv6 ospf command to verify the router IDs on all routers.
R2# show ipv6 ospf
Routing Process "ospfv3 1" with ID 2.2.2.2
Event-log enabled, Maximum number of events: 1000, Mode: cyclic
Router is not originating router-LSAs with maximum metric
<output omitted>
Step 2: Configure multiarea OSPFv3.
a. Issue the ipv6 ospf 1 area area-id command for each interface on R1 that is to participate in OSPFv3 routing. The loopback interfaces are assigned to area 1 and the serial interface is assigned to area 0. You will change the network type on the loopback interfaces to ensure that the correct subnet is advertised.
R1(config)# interface lo0
R1(config-if)# ipv6 ospf 1 area 1
R1(config-if)# ipv6 ospf network point-to-point
R1(config-if)# interface lo1
R1(config-if)# ipv6 ospf 1 area 1
R1(config-if)# ipv6 ospf network point-to-point
R1(config-if)# interface lo2
R1(config-if)# ipv6 ospf 1 area 1
R1(config-if)# ipv6 ospf network point-to-point
R1(config-if)# interface lo3
R1(config-if)# ipv6 ospf 1 area 1
R1(config-if)# ipv6 ospf network point-to-point
R1(config-if)# interface s0/0/0
R1(config-if)# ipv6 ospf 1 area 0
b. Use the show ipv6 protocols command to verify multiarea OSPFv3 status.
R1# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "ospf 1"
Router ID 1.1.1.1
Area border router
Number of areas: 2 normal, 0 stub, 0 nssa
Interfaces (Area 0):
Serial0/0/0
Interfaces (Area 1):
Loopback0
Loopback1
Loopback2
Loopback3
Redistribution:
None
c. Assign all interfaces on R2 to participate in OSPFv3 area 0. For the loopback interface, change the network type to point-to point. Write the commands used in the space below.
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 19
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R2(config)# interface lo8
R2(config-if)# ipv6 ospf 1 area 0
R2(config-if)# ipv6 ospf network point-to-point
R2(config-if)# interface s0/0/0
R2(config-if)# ipv6 ospf 1 area 0
R2(config-if)# interface s0/0/1
R2(config-if)# ipv6 ospf 1 area 0
d. Use the show ipv6 ospf interface brief command to view OSPFv3 enabled interfaces.
R2# show ipv6 ospf interface brief
Interface PID Area Intf ID Cost State Nbrs F/C
Lo8 1 0 13 1 P2P 0/0
Se0/0/1 1 0 7 64 P2P 1/1
Se0/0/0 1 0 6 64 P2P 1/1
e. Assign the loopback interfaces on R3 to participate in OSPFv3 area 2 and change the network type to point-to-point. Assign the serial interface to participate in OSPFv3 area 0. Write the commands used in the space below.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R3(config)# interface lo4
R3(config-if)# ipv6 ospf 1 area 2
R3(config-if)# ipv6 ospf network point-to-point
R3(config-if)# interface lo5
R3(config-if)# ipv6 ospf 1 area 2
R3(config-if)# ipv6 ospf network point-to-point
R3(config-if)# interface lo6
R3(config-if)# ipv6 ospf 1 area 2
R3(config-if)# ipv6 ospf network point-to-point
R3(config-if)# interface lo7
R3(config-if)# ipv6 ospf 1 area 2
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 19
R3(config-if)# ipv6 ospf network point-to-point
R3(config-if)# interface s0/0/1
R3(config-if)# ipv6 ospf 1 area 0
f. Use the show ipv6 ospf command to verify configurations.
R3# show ipv6 ospf
Routing Process "ospfv3 1" with ID 3.3.3.3
Event-log enabled, Maximum number of events: 1000, Mode: cyclic
It is an area border router
Router is not originating router-LSAs with maximum metric
Initial SPF schedule delay 5000 msecs
Minimum hold time between two consecutive SPFs 10000 msecs
Maximum wait time between two consecutive SPFs 10000 msecs
Minimum LSA interval 5 secs
Minimum LSA arrival 1000 msecs
LSA group pacing timer 240 secs
Interface flood pacing timer 33 msecs
Retransmission pacing timer 66 msecs
Number of external LSA 0. Checksum Sum 0x000000
Number of areas in this router is 2. 2 normal 0 stub 0 nssa
Graceful restart helper support enabled
Reference bandwidth unit is 100 mbps
RFC1583 compatibility enabled
Area BACKBONE(0)
Number of interfaces in this area is 1
SPF algorithm executed 2 times
Number of LSA 16. Checksum Sum 0x0929F8
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
Area 2
Number of interfaces in this area is 4
SPF algorithm executed 2 times
Number of LSA 13. Checksum Sum 0x048E3C
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
Step 3: Verify OSPFv3 neighbors and routing information.
a. Issue the show ipv6 ospf neighbor command on all routers to verify that each router is listing the correct routers as neighbors.
R1# show ipv6 ospf neighbor
OSPFv3 Router with ID (1.1.1.1) (Process ID 1)
Neighbor ID Pri State Dead Time Interface ID Interface
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 19
2.2.2.2 0 FULL/ - 00:00:39 6 Serial0/0/0
b. Issue the show ipv6 route ospf command on all routers to verify that each router has learned routes to all networks in the Addressing Table.
R1# show ipv6 route ospf
IPv6 Routing Table - default - 16 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, H - NHRP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external, ND - ND Default, NDp - ND Prefix, DCE - Destination
NDr - Redirect, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1
OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
OI 2001:DB8:ACAD:4::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:5::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:6::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:7::/64 [110/129]
via FE80::2, Serial0/0/0
O 2001:DB8:ACAD:8::/64 [110/65]
via FE80::2, Serial0/0/0
O 2001:DB8:ACAD:23::/64 [110/128]
via FE80::2, Serial0/0/0
What is the significance of an OI route?
____________________________________________________________________________________
An OI route is an OSPF interarea route, which was learned from an OSPF neighbor participating in another area.
c. Issue the show ipv6 ospf database command on all routers.
R1# show ipv6 ospf database
OSPFv3 Router with ID (1.1.1.1) (Process ID 1)
Router Link States (Area 0)
ADV Router Age Seq# Fragment ID Link count Bits
1.1.1.1 908 0x80000001 0 1 B
2.2.2.2 898 0x80000003 0 2 None
3.3.3.3 899 0x80000001 0 1 B
Inter Area Prefix Link States (Area 0)
ADV Router Age Seq# Prefix
1.1.1.1 907 0x80000001 2001:DB8:ACAD::/62
3.3.3.3 898 0x80000001 2001:DB8:ACAD:4::/62
Link (Type-8) Link States (Area 0)
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 19
ADV Router Age Seq# Link ID Interface
1.1.1.1 908 0x80000001 6 Se0/0/0
2.2.2.2 909 0x80000002 6 Se0/0/0
Intra Area Prefix Link States (Area 0)
ADV Router Age Seq# Link ID Ref-lstype Ref-LSID
1.1.1.1 908 0x80000001 0 0x2001 0
2.2.2.2 898 0x80000003 0 0x2001 0
3.3.3.3 899 0x80000001 0 0x2001 0
Router Link States (Area 1)
ADV Router Age Seq# Fragment ID Link count Bits
1.1.1.1 908 0x80000001 0 0 B
Inter Area Prefix Link States (Area 1)
ADV Router Age Seq# Prefix
1.1.1.1 907 0x80000001 2001:DB8:ACAD:12::/64
1.1.1.1 907 0x80000001 2001:DB8:ACAD:8::/64
1.1.1.1 888 0x80000001 2001:DB8:ACAD:23::/64
1.1.1.1 888 0x80000001 2001:DB8:ACAD:4::/62
Link (Type-8) Link States (Area 1)
ADV Router Age Seq# Link ID Interface
1.1.1.1 908 0x80000001 13 Lo0
1.1.1.1 908 0x80000001 14 Lo1
1.1.1.1 908 0x80000001 15 Lo2
1.1.1.1 908 0x80000001 16 Lo3
Intra Area Prefix Link States (Area 1)
ADV Router Age Seq# Link ID Ref-lstype Ref-LSID
1.1.1.1 908 0x80000001 0 0x2001 0
How many link state databases are found on R1? _____ 2
How many link state databases are found on R2? _____ 1
How many link state databases are found on R3? _____ 2
Part 3: Configure Interarea Route Summarization
In Part 3, you will manually configure interarea route summarization on the ABRs.
Step 1: Summarize networks on R1.
a. List the network addresses for the loopback interfaces and identify the hextet section where the addresses differ.
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 19
2001:DB8:ACAD:0000::1/64
2001:DB8:ACAD:0001::1/64
2001:DB8:ACAD:0002::1/64
2001:DB8:ACAD:0003::1/64
b. Convert the differing section from hex to binary.
2001:DB8:ACAD: 0000 0000 0000 0000::1/64
2001:DB8:ACAD: 0000 0000 0000 0001::1/64
2001:DB8:ACAD: 0000 0000 0000 0010::1/64
2001:DB8:ACAD: 0000 0000 0000 0011::1/64
c. Count the number of leftmost matching bits to determine the prefix for the summary route.
2001:DB8:ACAD: 0000 0000 0000 0000::1/64
2001:DB8:ACAD: 0000 0000 0000 0001::1/64
2001:DB8:ACAD: 0000 0000 0000 0010::1/64
2001:DB8:ACAD: 0000 0000 0000 0011::1/64
How many bits match? _____ /62
d. Copy the matching bits and then add zero bits to determine the summarized network address.
2001:DB8:ACAD: 0000 0000 0000 0000::0
e. Convert the binary section back to hex.
2001:DB8:ACAD::
f. Append the prefix of the summary route (result of Step 1c).
2001:DB8:ACAD::/62
Step 2: Configure interarea route summarization on R1.
a. To manually configure interarea route summarization on R1, use the area area-id range address mask command.
R1(config)# ipv6 router ospf 1
R1(config-rtr)# area 1 range 2001:DB8:ACAD::/62
b. View the OSPFv3 routes on R3.
R3# show ipv6 route ospf
IPv6 Routing Table - default - 14 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, H - NHRP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external, ND - ND Default, NDp - ND Prefix, DCE - Destination
NDr - Redirect, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1
OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
OI 2001:DB8:ACAD::/62 [110/129]
via FE80::2, Serial0/0/1
O 2001:DB8:ACAD:8::/64 [110/65]
via FE80::2, Serial0/0/1
O 2001:DB8:ACAD:12::/64 [110/128]
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 19
via FE80::2, Serial0/0/1
Compare this output to the output from Part 2, Step 3b. How are the networks in area 1 now expressed in the routing table on R3?
____________________________________________________________________________________
The networks are summarized as a single OSPF interarea route.
c. View the OSPFv3 routes on R1.
R1# show ipv6 route ospf
IPv6 Routing Table - default - 18 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, H - NHRP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external, ND - ND Default, NDp - ND Prefix, DCE - Destination
NDr - Redirect, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1
OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
O 2001:DB8:ACAD::/62 [110/1]
via Null0, directly connected
OI 2001:DB8:ACAD:4::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:5::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:6::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:7::/64 [110/129]
via FE80::2, Serial0/0/0
O 2001:DB8:ACAD:8::/64 [110/65]
via FE80::2, Serial0/0/0
O 2001:DB8:ACAD:23::/64 [110/128]
via FE80::2, Serial0/0/0
Compare this output to the output from Part 2, Step 3b. How are the summarized networks expressed in the routing table on R1?
____________________________________________________________________________________
The summarized networks appear as an OSPF intra-area (O) entry with a Null0 exit interface. This is a bogus entry created by the router to prevent routing loops.
Step 3: Summarize networks and configure interarea route summarization on R3.
a. Summarize the loopback interfaces on R3.
1) List the network addresses and identify the hextet section where the addresses differ.
2) Convert the differing section from hex to binary.
3) Count the number of left-most matching bits to determine the prefix for the summary route.
4) Copy the matching bits and then add zero bits to determine the summarized network address.
5) Convert the binary section back to hex.
6) Append the prefix of the summary route.
Write the summary address in the space provided.
____________________________________________________________________________________
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 19
2001:db8:acad:4::/62
b. Manually configure interarea route summarization on R3. Write the commands in the space provided.
____________________________________________________________________________________
R3(config)# ipv6 router ospf 1
R3(config-rtr)# area 2 range 2001:db8:acad:4::/62
c. Verify that area 2 routes are summarized on R1. What command was used?
____________________________________________________________________________________
show ipv6 route or show ipv6 route ospf
d. Record the routing table entry on R1 for the summarized route advertised from R3.
____________________________________________________________________________________
OI 2001:DB8:ACAD:4::/62 [110/129]
via FE80::2, Serial0/0/0
Reflection
1. Why would multiarea OSPFv3 be used?
_______________________________________________________________________________________
_______________________________________________________________________________________
Answers will vary. Multiarea OSPFv3 can be used in large network domains to improve the efficiency of the routing process, decrease the size of routing tables, and decrease router CPU/memory processing requirements.
2. What is the benefit of configuring interarea route summarization?
_______________________________________________________________________________________
_______________________________________________________________________________________
Configuring interarea route summarization decreases the size of routing tables throughout the network domain and decreases the number of type 3 link state advertisements (LSAs) sent from area border routers to the backbone area. If one of the summarized networks is down, it does not necessarily cause the routers in other areas to rerun their SPF algorithm.
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 19
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs - Final
Router R1
R1#show run
Building configuration...
Current configuration : 2078 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
!
!
no ip domain lookup
ip cef
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 19
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
redundancy
!
interface Loopback0
no ip address
ipv6 address 2001:DB8:ACAD::1/64
ipv6 ospf 1 area 1
ipv6 ospf network point-to-point
!
interface Loopback1
no ip address
ipv6 address 2001:DB8:ACAD:1::1/64
ipv6 ospf 1 area 1
ipv6 ospf network point-to-point
!
interface Loopback2
no ip address
ipv6 address 2001:DB8:ACAD:2::1/64
ipv6 ospf 1 area 1
ipv6 ospf network point-to-point
!
interface Loopback3
no ip address
ipv6 address 2001:DB8:ACAD:3::1/64
ipv6 ospf 1 area 1
ipv6 ospf network point-to-point
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 19
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 ospf 1 area 0
clock rate 2000000
!
interface Serial0/0/1
no ip address
shutdown
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
ipv6 router ospf 1
router-id 1.1.1.1
area 1 range 2001:DB8:ACAD::/62
!
!
!
!
control-plane
!
!
banner motd ^CUnauthorized access is strictly prohibited.^C
!
line con 0
password 7 045802150C2E
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 060506324F41
login
transport input all
!
scheduler allocate 20000 1000
!
end
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 19
Router R2
R2#show run
Building configuration...
Current configuration : 1809 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
no aaa new-model
!
no ip domain lookup
ip cef
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
redundancy
!
interface Loopback8
no ip address
ipv6 address 2001:DB8:ACAD:8::1/64
ipv6 ospf 1 area 0
ipv6 ospf network point-to-point
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 19
interface Serial0/0/0
no ip address
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:12::2/64
ipv6 ospf 1 area 0
!
interface Serial0/0/1
no ip address
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
ipv6 ospf 1 area 0
clock rate 2000000
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
ipv6 router ospf 1
router-id 2.2.2.2
!
!
!
control-plane
!
!
banner motd ^CUnauthorized access is strictly prohibited.^C
!
line con 0
password 7 0822455D0A16
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 110A1016141D
login
transport input all
!
scheduler allocate 20000 1000
!
end
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 19
Router R3
R3#show run
Building configuration...
Current configuration : 2142 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
no aaa new-model
memory-size iomem 15
!
no ip domain lookup
ip cef
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated!
!
redundancy
!
interface Loopback4
no ip address
ipv6 address 2001:DB8:ACAD:4::1/64
ipv6 ospf 1 area 2
ipv6 ospf network point-to-point
!
interface Loopback5
no ip address
ipv6 address 2001:DB8:ACAD:5::1/64
ipv6 ospf 1 area 2
ipv6 ospf network point-to-point
!
interface Loopback6
no ip address
ipv6 address 2001:DB8:ACAD:6::1/64
ipv6 ospf 1 area 2
ipv6 ospf network point-to-point
!
interface Loopback7
no ip address
ipv6 address 2001:DB8:ACAD:7::1/64
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 19
ipv6 ospf 1 area 2
ipv6 ospf network point-to-point
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/0/1
no ip address
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:23::3/64
ipv6 ospf 1 area 0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ipv6 router ospf 1
router-id 3.3.3.3
area 2 range 2001:DB8:ACAD:4::/62
!
control-plane
!
banner motd ^CUnauthorized access is strictly prohibited.^C
!
line con 0
password 7 02050D480809
logging synchronous
login
line aux 0
line 2
Lab - Configuring Multiarea OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 19
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 14141B180F0B
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 29
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3 (Instructor
Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 29
Addressing Table
Device Interface IP Address
R1 Lo0 209.165.200.225/30
Lo1
192.168.1.1/24
2001:DB8:ACAD:1::1/64
FE80::1 link-local
Lo2
192.168.2.1/24
2001:DB8:ACAD:2::1/64
FE80::1 link-local
S0/0/0 (DCE)
192.168.12.1/30
2001:DB8:ACAD:12::1/64
FE80::1 link-local
R2 S0/0/0
192.168.12.2/30
2001:DB8:ACAD:12::2/64
FE80::2 link-local
S0/0/1 (DCE)
192.168.23.2/30
2001:DB8:ACAD:23::2/64
FE80::2 link-local
Lo6
192.168.6.1/24
2001:DB8:ACAD:6::1/64
FE80::2 link-local
R3 Lo4
192.168.4.1/24
2001:DB8:ACAD:4::1/64
FE80::3 link-local
Lo5
192.168.5.1/24
2001:DB8:ACAD:5::1/64
FE80::3 link-local
S0/0/1
192.168.23.1/30
2001:DB8:ACAD:23::1/64
FE80::3 link-local
Objectives
Part 1: Build the Network and Load Device Configurations
Part 2: Troubleshoot Layer 3 Connectivity
Part 3: Troubleshoot OSPFv2
Part 4: Troubleshoot OSPFv3
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 29
Background / Scenario
Open Shortest Path First (OSPF) is an open-standard link-state routing protocol for IP networks. OSPFv2 is defined for IPv4 networks, while OSPFv3 is defined for IPv6 networks. OSPFv2 and OSPFv3 are completely isolated routing protocols, meaning changes in OSPFv2 do not affect OSPFv3 routing, and vice versa.
In this lab, a multiarea OSPF network running OSPFv2 and OSPFv3 is experiencing problems. You have been assigned to find the problems with the network and correct them.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
Console cables to configure the Cisco IOS devices via the console ports
Serial cables as shown in the topology
Part 1: Build the Network and Load Device Configurations
Step 1: Cable the network as shown in the topology.
Step 2: Load router configuration files.
Load the following configurations into the appropriate router. All routers have the same passwords. The enable password is class, and the line password is cisco.
Router R1 Configuration:
enable
conf t
hostname R1
enable secret class
ipv6 unicast-routing
no ip domain lookup
interface Loopback0
ip address 209.165.200.225 255.255.255.252
interface Loopback1
ip address 192.168.1.1 255.255.255.0
ipv6 address 2001:DB80:ACAD:1::1/64
! ipv6 address 2001:DB8:ACAD:1::1/64
! ipv6 ospf 1 area 1
ipv6 ospf network point-to-point
interface Loopback2
ip address 192.168.2.1 255.255.255.0
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 29
ipv6 address 2001:DB8:ACAD:2::1/64
ipv6 ospf 1 area 1
ipv6 ospf network point-to-point
interface Serial0/0/0
ip address 192.168.21.1 255.255.255.252
!ip address 192.168.12.1 255.255.255.252
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 ospf 1 area 0
clock rate 128000
shutdown
!no shutdown
router ospf 1
router-id 1.1.1.1
passive-interface Loopback1
passive-interface Loopback2
!network 192.168.1.0 0.0.0.255 area 1
network 192.168.2.0 0.0.0.255 area 1
network 192.168.12.0 0.0.0.3 area 0
default-information originate
ipv6 router ospf 1
! router-id 1.1.1.1
area 1 range 2001:DB8:ACAD::/61
! area 1 range 2001:DB8:ACAD::/62
ip route 0.0.0.0 0.0.0.0 Loopback0
banner motd @
Unauthorized Access is Prohibited! @
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
logging synchronous
login
transport input all
end
Router R2 Configuration:
enable
conf t
hostname R2
ipv6 unicast-routing
no ip domain lookup
enable secret class
interface Loopback6
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 29
ip address 192.168.6.1 255.255.255.0
ipv6 address 2001:DB8:CAD:6::1/64
! ipv6 address 2001:DB8:ACAD:6::1/64
! ipv6 ospf 1 area 3
interface Serial0/0/0
ip address 192.168.12.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:12::2/64
ipv6 ospf 1 area 0
no shutdown
interface Serial0/0/1
ip address 192.168.23.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
ipv6 ospf 1 area 3
clock rate 128000
no shutdown
router ospf 1
router-id 2.2.2.2
passive-interface Loopback6
network 192.168.6.0 0.0.0.255 area 3
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 3
ipv6 router ospf 1
router-id 2.2.2.2
banner motd @
Unauthorized Access is Prohibited! @
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
logging synchronous
login
transport input all
end
Router R3 Configuration:
enable
conf t
hostname R3
no ip domain lookup
ipv6 unicast-routing
enable secret class
interface Loopback4
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 29
ip address 192.168.4.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:4::1/64
ipv6 ospf 1 area 3
interface Loopback5
ip address 192.168.5.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:5::1/64
ipv6 ospf 1 area 3
interface Serial0/0/1
ip address 192.168.23.1 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:23::1/64
ipv6 ospf 1 area 3
no shutdown
router ospf 1
router-id 3.3.3.3
passive-interface Loopback4
passive-interface Loopback5
network 192.168.4.0 0.0.0.255 area 3
network 192.168.5.0 0.0.0.255 area 3
! network 192.168.23.0 0.0.0.3 area 3
ipv6 router ospf 1
router-id 3.3.3.3
banner motd @
Unauthorized Access is Prohibited! @
line con 0
password cisco
logging synchronous
login
line vty 0 4
password cisco
logging synchronous
login
transport input all
end
Step 3: Save your configuration.
Part 2: Troubleshoot Layer 3 Connectivity
In Part 2, you will verify that Layer 3 connectivity is established on all interfaces. You will need to test both IPv4 and IPv6 connectivity for all device interfaces.
Step 1: Verify the interfaces listed in the Addressing Table are active and configured with
correct IP address information.
a. Issue the show ip interface brief command on all three routers to verify that the interfaces are in an up/up state.
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 29
R1# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 unassigned YES unset administratively down down
GigabitEthernet0/1 unassigned YES unset administratively down down
Serial0/0/0 192.168.21.1 YES manual administratively down down
Serial0/0/1 unassigned YES unset administratively down down
Loopback0 209.165.200.225 YES manual up up
Loopback1 192.168.1.1 YES manual up up
Loopback2 192.168.2.1 YES manual up up
R2# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 unassigned YES unset administratively down down
GigabitEthernet0/1 unassigned YES unset administratively down down
Serial0/0/0 192.168.12.2 YES manual down down
Serial0/0/1 192.168.23.2 YES SLARP up up
Loopback6 192.168.6.1 YES manual up up
R3# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 unassigned YES unset administratively down down
GigabitEthernet0/1 unassigned YES unset administratively down down
Serial0/0/0 unassigned YES unset administratively down down
Serial0/0/1 192.168.23.1 YES manual up up
Loopback4 192.168.4.1 YES manual up up
Loopback5 192.168.5.1 YES manual up up
b. Issue the show run | section interface command to view all the commands related to interfaces.
R1:
R1# show run | section interface
interface Loopback0
ip address 209.165.200.225 255.255.255.252
interface Loopback1
ip address 192.168.1.1 255.255.255.0
ipv6 address 2001:DB80:ACAD:1::1/64
ipv6 ospf 1 area 0
ipv6 ospf network point-to-point
interface Loopback2
ip address 192.168.2.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:2::1/64
ipv6 ospf 1 area 1
ipv6 ospf network point-to-point
interface Embedded-Service-Engine0/0
no ip address
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 29
shutdown
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface Serial0/0/0
ip address 192.168.21.1 255.255.255.252
shutdown
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 ospf 1 area 1
clock rate 128000
interface Serial0/0/1
no ip address
shutdown
passive-interface Loopback1
passive-interface Loopback2
R2:
R2# show run | section interface
interface Loopback6
ip address 192.168.6.1 255.255.255.0
ipv6 address 2001:DB8:CAD:6::1/64
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface Serial0/0/0
ip address 192.168.12.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:12::2/64
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 29
ipv6 ospf 1 area 0
interface Serial0/0/1
ip address 192.168.23.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
ipv6 ospf 1 area 3
clock rate 128000
passive-interface Loopback6
R3:
R3# show run | section interface
interface Loopback4
ip address 192.168.4.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:4::1/64
ipv6 ospf 1 area 3
interface Loopback5
ip address 192.168.5.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:5::1/64
ipv6 ospf 1 area 3
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
interface Serial0/0/1
ip address 192.168.23.1 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:23::1/64
ipv6 ospf 1 area 3
passive-interface Loopback4
passive-interface Loopback5
c. Resolve all problems found. Record the commands used to correct the configuration.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 29
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# interface s0/0/0
R1(config-if)# ip address 192.168.12.1 255.255.255.252
R1(config-if)# no shutdown
R1(config-if)# interface lo1
R1(config-if)# no ipv6 address 2001:DB80:ACAD:1::1/64
R1(config-if)# ipv6 address 2001:db8:acad:1::1/64
R1(config-if)# end
R2(config)# interface lo6
R2(config-if)# no ipv6 address 2001:DB8:CAD:6::1/64
R2(config-if)# ipv6 address 2001:db8:acad:6::1/64
R2(config-if)# end
R3: No L3 connectivity issues
d. Using the ping command, verify that IPv4 and IPv6 connectivity has been established on all directly connected router interfaces. If problems still exist, continue troubleshooting Layer 3 issues.
Part 3: Troubleshoot OSPFv2
Note: LAN (loopback) interfaces should not advertise OSPF routing information, but routes to these networks should be contained in the routing tables.
Step 1: Test IPv4 end-to-end connectivity.
From each router, ping all interfaces on the other routers. Record your results below as IPv4 OSPFv2 connectivity problems do exist.
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
R1 to R2: All pings were successful.
R1 to R3: All pings failed.
R2 to R1: All pings were successful.
R2 to R3: Pings to the Loopback 4 and 5 failed.
R3 to R1: All pings failed.
R3 to R2: Pings to the Loopback 6 and Serial 0/0/0 failed.
Step 2: Verify that all interfaces are assigned to the proper OSPFv2 areas on R1.
a. Issue the show ip protocols command to verify that OSPF is running and that all networks are being advertised in the correct areas. Verify that the router ID is set correctly, as well for OSPF.
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 29
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 1.1.1.1
It is an area border and autonomous system boundary router
Redistributing External Routes from,
Number of areas in this router is 2. 2 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.2.0 0.0.0.255 area 1
192.168.12.0 0.0.0.3 area 0
Passive Interface(s):
Loopback1
Loopback2
Routing Information Sources:
Gateway Distance Last Update
2.2.2.2 110 00:10:43
Distance: (default is 110)
b. If required, make the necessary changes needed to the configuration on R1 based on the output from the show ip protocols command. Record the commands used to correct the configuration.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# router ospf 1
R1(config-router)# network 192.168.1.0 0.0.0.255 area 1
R1(config-router)# end
c. If required, re-issue the show ip protocols command to verify that your changes had the desired effect.
d. Issue the show ip ospf interface brief command to verify that the serial interface and loopback interfaces 1 and 2 are listed as OSPF networks assigned to their respective areas.
R1# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/0 1 0 192.168.12.1/30 64 P2P 1/1
Lo2 1 1 192.168.2.1/24 1 LOOP 0/0
Lo1 1 1 192.168.1.1/24 1 LOOP 0/0
e. Resolve any problems discovered on R1 for OSPFv2.
Instructor Note: All problems were resolved for OSPFv2 on R1.
Step 3: Verify that all interfaces are assigned to the proper OSPFv2 areas on R2.
a. Issue the show ip protocols command to verify that OSPF is running and that all networks are being advertised in their proper respective areas. Verify that the router ID is also set correctly.
R2# show ip protocols
*** IP Routing is NSF aware ***
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 29
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 2.2.2.2
It is an area border router
Number of areas in this router is 2. 2 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.6.0 0.0.0.255 area 3
192.168.12.0 0.0.0.3 area 0
192.168.23.0 0.0.0.3 area 3
Passive Interface(s):
Loopback6
Routing Information Sources:
Gateway Distance Last Update
1.1.1.1 110 00:09:33
Distance: (default is 110)
b. If required, make any necessary changes to the configuration on R2 based on the output from the show ip protocols command. Record the commands used to correct the configuration.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
No changes are necessary on R2 for OSPFv2.
Instructor Note: No changes are necessary on R2 for OSPFv2.
c. If required, re-issue the show ip protocols command to verify that your changes had the desired effect.
d. Issue the show ip ospf interface brief command to verify that all interfaces are listed as OSPF networks assigned to their proper respective areas.
R2# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Se0/0/0 1 0 192.168.12.2/30 64 P2P 1/1
Lo6 1 3 192.168.6.1/24 1 LOOP 0/0
Se0/0/1 1 3 192.168.23.2/30 64 P2P 0/0
e. Resolve any problems discovered on R2 for OSPFv2.
Instructor Note: All problems were resolved for OSPFv2 on R2.
Step 4: Verify that all interfaces are assigned to the proper OSPFv2 areas on R3.
a. Issue the show ip protocols command to verify that OSPF is running and that all networks are being advertised in their respective areas. Verify that the router ID is also set correctly.
R3# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 29
Router ID 3.3.3.3
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.4.0 0.0.0.255 area 3
192.168.5.0 0.0.0.255 area 3
Passive Interface(s):
Loopback4
Loopback5
Routing Information Sources:
Gateway Distance Last Update
Distance: (default is 110)
b. If required, make the necessary changes to the configuration on R3 based on the output from the show ip protocols command. Record the commands used to correct the configuration.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R3(config)# router ospf 1
R3(config-router)# network 192.168.23.0 0.0.0.3 area 3
R3(config-router)# end
c. If required, re-issue the show ip protocols command to verify that your changes had the desired effect.
d. Issue the show ip ospf interface brief command to verify that all interfaces are listed as OSPF networks assigned to their proper areas.
R3# show ip ospf interface brief
Interface PID Area IP Address/Mask Cost State Nbrs F/C
Lo4 1 3 192.168.4.1/24 1 LOOP 0/0
Lo5 1 3 192.168.5.1/24 1 LOOP 0/0
Se0/0/1 1 3 192.168.23.1/30 64 P2P 1/1
e. Resolve any problems discovered on R3 for OSPFv2.
Instructor Note: All problems were resolved for OSPFv2 on R3.
Step 5: Verify OSPFv2 neighbor information.
Issue the show ip ospf neighbor command to verify that each router has all OSPFv2 neighbors listed.
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
2.2.2.2 0 FULL/ - 00:00:39 192.168.12.2 Serial0/0/0
R2# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
1.1.1.1 0 FULL/ - 00:00:31 192.168.12.1 Serial0/0/0
3.3.3.3 0 FULL/ - 00:00:39 192.168.23.1 Serial0/0/1
R3# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
2.2.2.2 0 FULL/ - 00:00:39 192.168.23.2 Serial0/0/1
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 29
Step 6: Verify OSPFv2 routing information.
a. Issue the show ip route ospf command to verify that each router has all OSPFv2 routes in their respective routing tables.
R1# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
192.168.4.0/32 is subnetted, 1 subnets
O IA 192.168.4.1 [110/129] via 192.168.12.2, 00:16:10, Serial0/0/0
192.168.5.0/32 is subnetted, 1 subnets
O IA 192.168.5.1 [110/129] via 192.168.12.2, 00:16:10, Serial0/0/0
192.168.6.0/32 is subnetted, 1 subnets
O IA 192.168.6.1 [110/65] via 192.168.12.2, 00:56:07, Serial0/0/0
192.168.23.0/30 is subnetted, 1 subnets
O IA 192.168.23.0 [110/128] via 192.168.12.2, 00:56:07, Serial0/0/0
R2# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 192.168.12.1 to network 0.0.0.0
O*E2 0.0.0.0/0 [110/1] via 192.168.12.1, 00:57:11, Serial0/0/0
192.168.1.0/32 is subnetted, 1 subnets
O IA 192.168.1.1 [110/65] via 192.168.12.1, 00:39:50, Serial0/0/0
192.168.2.0/32 is subnetted, 1 subnets
O IA 192.168.2.1 [110/65] via 192.168.12.1, 00:57:10, Serial0/0/0
192.168.4.0/32 is subnetted, 1 subnets
O 192.168.4.1 [110/65] via 192.168.23.1, 00:17:13, Serial0/0/1
192.168.5.0/32 is subnetted, 1 subnets
O 192.168.5.1 [110/65] via 192.168.23.1, 00:17:13, Serial0/0/1
R3# show ip route ospf
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 29
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 192.168.23.1 to network 0.0.0.0
O*E2 0.0.0.0/0 [110/1] via 192.168.23.1, 00:18:06, Serial0/0/1
192.168.1.0/32 is subnetted, 1 subnets
O IA 192.168.1.1 [110/129] via 192.168.23.2, 00:18:06, Serial0/0/1
192.168.2.0/32 is subnetted, 1 subnets
O IA 192.168.2.1 [110/129] via 192.168.23.2, 00:18:06, Serial0/0/1
192.168.6.0/32 is subnetted, 1 subnets
O 192.168.6.1 [110/65] via 192.168.23.2, 00:18:06, Serial0/0/1
192.168.12.0/30 is subnetted, 1 subnets
O IA 192.168.12.0 [110/128] via 192.168.23.2, 00:18:06, Serial0/0/1
b. If any OSPFv2 routes are missing, troubleshoot and resolve the problems.
Instructor Note: All routes for OSPFv2 are in all three routing tables.
Step 7: Verify IPv4 end-to-end connectivity.
From each router, ping all interfaces on other routers. If IPv4 end-to-end connectivity does not exist, then continue troubleshooting to resolve any remaining issues.
Part 4: Troubleshoot OSPFv3
Note: LAN (loopback) interfaces should not advertise OSPFv3 routing information, but routes to these networks should be contained in the routing tables.
Step 1: Test IPv6 end-to-end connectivity.
From each router, ping all interfaces on the other routers. Record your results as IPv6 connectivity problems do exist.
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
R1 to R2: All pings to loopback 6 failed.
R1 to R3: All pings were successful.
R2 to R1: All pings to loopback 1 and 2 failed.
R2 to R3: All pings were successful.
R3 to R1: All pings were successful.
R3 to R2: All pings were successful.
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 29
Step 2: Verify that IPv6 unicast routing has been enabled on all routers.
a. An easy way to verify that IPv6 routing has been enabled on a router is to use the show run | section ipv6 unicast command. By adding the pipe section to the show run command, the ipv6 unicast-routing command is displayed if IPv6 routing has been enabled.
R1# show run | section ipv6 unicast
ipv6 unicast-routing
R2# show run | section ipv6 unicast
ipv6 unicast-routing
R3# show run | section ipv6 unicast
ipv6 unicast-routing
b. If IPv6 unicast routing is not enabled on one or more routers, enable it now. If required, record the commands used to correct the configuration.
____________________________________________________________________________________
____________________________________________________________________________________
IPv6 routing has been enabled on all routers.
Step 3: Verify that all interfaces are assigned to the proper OSPFv3 areas on R1.
a. Issue the show ipv6 protocols command to verify that the router ID is correct and the expected interfaces display in their proper areas.
R1# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "ospf 1"
Router ID 209.165.200.225
Area border router
Number of areas: 2 normal, 0 stub, 0 nssa
Interfaces (Area 0):
Serial0/0/0
Interfaces (Area 1):
Loopback2
Redistribution:
None
b. If required, make any necessary changes to the configuration on R1 based on the output from the show ipv6 protocols command. Record the commands used to correct the configuration. It may be necessary to reset OSPF process by issuing the clear ipv6 ospf process command.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# interface lo1
R1(config-if)# ipv6 ospf 1 area 1
R1(config-if)# ipv6 router ospf 1
R1(config-rtr)# router-id 1.1.1.1
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 29
c. Re-issue the show ipv6 protocols command on R1 to make sure changes took effect.
R1# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "ospf 1"
Router ID 1.1.1.1
Area border router
Number of areas: 2 normal, 0 stub, 0 nssa
Interfaces (Area 0):
Serial0/0/0
Interfaces (Area 1):
Loopback2
Loopback1
Redistribution:
None
d. Enter the show ipv6 route ospf command on R1 to verify that the interarea route summarization is configured correctly.
R1# show ipv6 route ospf
IPv6 Routing Table - default - 12 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
O 2001:DB8:ACAD::/61 [110/1]
via Null0, directly connected
OI 2001:DB8:ACAD:4::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:5::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:23::/64 [110/128]
via FE80::2, Serial0/0/0
e. Which IPv6 networks are included in the interarea route summarization shown in the routing table?
____________________________________________________________________________________
____________________________________________________________________________________
2001:DB8:ACAD::/64 through 2001:DB8:ACAD:7::/64
f. If required, make the necessary configuration changes on R1. Record the commands used to correct the configuration.
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# ipv6 router ospf 1
R1(config-rtr)# no area 1 range 2001:DB8:ACAD::/61
R1(config-rtr)# area 1 range 2001:DB8:ACAD::/62
g. If required, re-issue the show ipv6 route ospf command on R1 to verify the changes.
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 29
R1# show ipv6 route ospf
IPv6 Routing Table - default - 11 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
O 2001:DB8:ACAD::/62 [110/1]
via Null0, directly connected
OI 2001:DB8:ACAD:4::1/128 [110/128]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:5::1/128 [110/128]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:23::/64 [110/128]
via FE80::2, Serial0/0/0
Step 4: Verify that all interfaces are assigned to the proper OSPFv3 areas on R2.
a. Issue the show ipv6 protocols command and verify that the router ID is correct and that the expected interfaces are showing up under their proper areas.
R2# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "ospf 1"
Router ID 2.2.2.2
Area border router
Number of areas: 2 normal, 0 stub, 0 nssa
Interfaces (Area 0):
Serial0/0/0
Interfaces (Area 3):
Serial0/0/1
Redistribution:
None
b. If required, make any necessary changes to the configuration on R2 based on the output from the show ipv6 protocols command. Record the commands used to correct the configuration. It may be necessary to reset OSPF process by issuing the clear ipv6 ospf process command.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R2(config)# interface lo 6
R2(config-if)# ipv6 ospf 1 area 3
c. Verify that the configuration change has the desired effect.
R2# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "ospf 1"
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 29
Router ID 2.2.2.2
Area border router
Number of areas: 2 normal, 0 stub, 0 nssa
Interfaces (Area 0):
Serial0/0/0
Interfaces (Area 3):
Loopback6
Serial0/0/1
Redistribution:
None
Step 5: Verify that all interfaces are assigned to the proper OSPFv3 areas on R3.
a. Issue the show ipv6 protocols command to verify that the router ID is correct and the expected interfaces display under their respective areas.
R3# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "ospf 1"
Router ID 3.3.3.3
Number of areas: 1 normal, 0 stub, 0 nssa
Interfaces (Area 3):
Loopback4
Loopback5
Serial0/0/1
Redistribution:
None
b. If required, make any necessary changes to the configuration on R3 based on the output from the show ipv6 protocols command. Record the commands used to correct the configuration. It may be necessary to reset OSPF process by issuing the clear ipv6 ospf process command.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
There are no problems with R3.
c. Verify that the configuration changes have the desired effect.
Step 6: Verify that all routers have correct neighbor adjacency information.
a. Issue the show ipv6 ospf neighbor command to verify that adjacencies have formed between neighboring routers.
R1# show ipv6 ospf neighbor
OSPFv3 Router with ID (1.1.1.1) (Process ID 1)
Neighbor ID Pri State Dead Time Interface ID Interface
2.2.2.2 0 FULL/ - 00:00:37 6 Serial0/0/0
R2# show ipv6 ospf neighbor
OSPFv3 Router with ID (2.2.2.2) (Process ID 1)
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 29
Neighbor ID Pri State Dead Time Interface ID Interface
1.1.1.1 0 FULL/ - 00:00:39 6 Serial0/0/0
3.3.3.3 0 FULL/ - 00:00:35 7 Serial0/0/1
R3# show ipv6 ospf neighbor
OSPFv3 Router with ID (3.3.3.3) (Process ID 1)
Neighbor ID Pri State Dead Time Interface ID Interface
2.2.2.2 0 FULL/ - 00:00:34 7 Serial0/0/1
Step 7: Verify OSPFv3 routing information.
a. Issue the show ipv6 route ospf command, and verify that OSPFv3 routes exist to all networks.
R1# show ipv6 route ospf
IPv6 Routing Table - default - 12 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
O 2001:DB8:ACAD::/62 [110/1]
via Null0, directly connected
OI 2001:DB8:ACAD:4::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:5::/64 [110/129]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:6::1/128 [110/64]
via FE80::2, Serial0/0/0
OI 2001:DB8:ACAD:23::/64 [110/128]
via FE80::2, Serial0/0/0
R2# show ipv6 route ospf
IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
OI 2001:DB8:ACAD::/62 [110/65]
via FE80::1, Serial0/0/0
O 2001:DB8:ACAD:4::/64 [110/65]
via FE80::3, Serial0/0/1
O 2001:DB8:ACAD:5::/64 [110/65]
via FE80::3, Serial0/0/1
R3# show ipv6 route ospf
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 29
IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, H - NHRP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external, ND - ND Default, NDp - ND Prefix, DCE - Destination
NDr - Redirect, O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1
OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
OI 2001:DB8:ACAD::/62 [110/129]
via FE80::2, Serial0/0/1
O 2001:DB8:ACAD:6::1/128 [110/64]
via FE80::2, Serial0/0/1
OI 2001:DB8:ACAD:12::/64 [110/128]
via FE80::2, Serial0/0/1
b. Resolve any routing issues that still exist.
Instructor Note: All OSPFv3 routing issues should have been resolved.
Step 8: Verify IPv6 end-to-end connectivity.
From each router, ping all of the IPv6 interfaces on the other routers. If IPv6 end-to-end issues still exist, continue troubleshooting to resolve any remaining issues.
Reflection
Why not just use the show running-config command to resolve all issues?
_______________________________________________________________________________________
Specific show commands give you the appropriate information that you need to verify settings without showing a lot of extraneous information.
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 29
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs
Router R1
R1#sh run
Building configuration...
Current configuration : 2041 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
!
!
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 29
!
!
!
!
no ip domain lookup
ip cef
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
interface Loopback0
ip address 209.165.200.225 255.255.255.252
!
interface Loopback1
ip address 192.168.1.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:1::1/64
ipv6 ospf 1 area 1
ipv6 ospf network point-to-point
!
interface Loopback2
ip address 192.168.2.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:2::1/64
ipv6 ospf 1 area 1
ipv6 ospf network point-to-point
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.12.1 255.255.255.252
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 ospf 1 area 0
clock rate 128000
!
interface Serial0/0/1
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 29
no ip address
shutdown
clock rate 2000000
!
router ospf 1
router-id 1.1.1.1
passive-interface Loopback1
passive-interface Loopback2
network 192.168.1.0 0.0.0.255 area 1
network 192.168.2.0 0.0.0.255 area 1
network 192.168.12.0 0.0.0.3 area 0
default-information originate
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Loopback0
!
ipv6 router ospf 1
router-id 1.1.1.1
area 1 range 2001:DB8:ACAD::/62
!
!
!
!
control-plane
!
!
banner motd ^C
Unauthorized Access is Prohibited! ^C
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
logging synchronous
login
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 25 of 29
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
R2#sh run
Building configuration...
Current configuration : 1847 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
!
!
!
!
!
!
no ip domain lookup
ip cef
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
interface Loopback6
ip address 192.168.6.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:6::1/64
ipv6 ospf 1 area 3
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 26 of 29
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.12.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:12::2/64
ipv6 ospf 1 area 0
!
interface Serial0/0/1
ip address 192.168.23.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
ipv6 ospf 1 area 3
clock rate 128000
!
router ospf 1
router-id 2.2.2.2
passive-interface Loopback6
network 192.168.6.0 0.0.0.255 area 3
network 192.168.12.0 0.0.0.3 area 0
network 192.168.23.0 0.0.0.3 area 3
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
ipv6 router ospf 1
router-id 2.2.2.2
!
!
!
!
control-plane
!
!
banner motd ^C
Unauthorized Access is Prohibited! ^C
!
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 27 of 29
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
logging synchronous
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R3
R3#sh run
Building configuration...
Current configuration : 1853 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
!
!
!
!
!
!
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 28 of 29
no ip domain lookup
ip cef
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
interface Loopback4
ip address 192.168.4.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:4::1/64
ipv6 ospf 1 area 3
!
interface Loopback5
ip address 192.168.5.1 255.255.255.0
ipv6 address 2001:DB8:ACAD:5::1/64
ipv6 ospf 1 area 3
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/0/1
ip address 192.168.23.1 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:23::1/64
ipv6 ospf 1 area 3
!
router ospf 1
router-id 3.3.3.3
passive-interface Loopback4
passive-interface Loopback5
network 192.168.4.0 0.0.0.255 area 3
Lab – Troubleshooting Multiarea OSPFv2 and OSPFv3
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 29 of 29
network 192.168.5.0 0.0.0.255 area 3
network 192.168.23.0 0.0.0.3 area 3
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
ipv6 router ospf 1
router-id 3.3.3.3
!
!
!
!
control-plane
!
!
banner motd ^C
Unauthorized Access is Prohibited! ^C
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
logging synchronous
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 6
Digital Trolleys (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Use CLI commands to verify operational status of a multiarea OSPF network.
OSPF is configured in this activity both as a single-area topology and as a multiarea topology to review show
commands from the chapter curriculum.
Scenario
Your city has an aging digital trolley system based on a one-area design. All communications within this one area are taking longer to process as trolleys are being added to routes serving the population of your growing city. Trolley departures and arrivals are also taking a little longer, because each trolley must check large routing tables to determine where to pick up and deliver residents from their source and destination streets.
A concerned citizen has come up with the idea of dividing the city into different areas for a more efficient way to determine trolley routing information. It is thought that if the trolley maps are smaller, the system might be improved because of faster and smaller updates to the routing tables.
Your city board approves and implements the new area-based, digital trolley system. But to ensure the new area routes are more efficient, the city board needs data to show the results at the next open board meeting.
Complete the activity directions as stated below.
Save your work and explain the differences between the old, single area and new, multiarea system to another group or the entire class.
Required Resources
Packet Tracer software
Word processing software
Directions
Step 1: Map the single-area city trolley routing topology.
a. Use Packet Tracer to map the old routing topology for the city. Cisco 1941 Integrated Services Routers (ISRs) are preferred.
b. Create a core area and place one of the routers in the core area.
c. Connect at least two routers to the core area router.
d. Choose to connect two more routers to the routers from Step 1c or create loopback addresses for the LAN interfaces on the routers from Step 1c.
e. Address the connected links or interfaces using IPv4 and VLSM.
f. Configure OSPF on each router for area 0 only.
g. Ping all routers to ensure full connectivity within the entire area.
Digital Trolleys
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 6
Step 2: Map the multiarea city trolley routing topology.
a. Use your cursor to highlight all devices from Step 1, and copy and paste them to another area of the Packet Tracer desktop.
b. Assign at least three areas to your topology. One must be the backbone (or core area) and the other two areas will be joined to the backbone area using current routers, which will now become area border routers.
c. Configure the appropriate routers to their new area assignments. Remove old area configuration commands and assign new area commands to the appropriate interfaces.
d. Save each router’s changes as you make changes.
e. When complete, you should have three areas represented on the topology and all routers should be able to ping each other throughout the network.
f. Use the drawing tool and identify your areas by drawing circles or rectangles around the three areas.
g. Save your work.
Step 3: Verify the network for city council members.
a. Use at least three commands learned (or used in this chapter) to help the city council prove that the new area, digital trolley routing topology works.
b. Save a copy of topology graphics and verification commands comparisons in table format to a word processing file.
c. Share your work with another group or the class. You may also want to add this activity and its files to a portfolio for this course.
Digital Trolleys
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 6
Instructor Resource Example
The information listed in this section is only one depiction of what students could see as a result of this activity. Other topology designs may vary per student groups.
Packet Tracer Single-area and Multiarea Topology Diagram Example
Digital Trolleys
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 6
Single-Area OSPF City Design
R1# show ip protocols
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 1.1.1.1
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.4.0 0.0.0.3 area 0
192.168.20.4 0.0.0.3 area 0
192.168.10.4 0.0.0.3 area 0
Routing Information Sources:
Gateway Distance Last Update
1.1.1.1 110 00:03:33
2.2.2.2 110 00:02:58
3.3.3.3 110 00:02:58
4.4.4.4 110 00:02:58
5.5.5.5 110 00:02:58
6.6.6.6 110 00:03:03
7.7.7.7 110 00:02:58
Distance: (default is 110)
R1#
Multiarea OSPF City Design
R1# show ip protocols
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 1.1.1.1
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
192.168.4.0 0.0.0.3 area 0
192.168.20.4 0.0.0.3 area 0
192.168.10.4 0.0.0.3 area 0
Routing Information Sources:
Gateway Distance Last Update
1.1.1.1 110 00:03:50
2.2.2.2 110 00:03:51
3.3.3.3 110 00:03:50
Distance: (default is 110)
R1#
Digital Trolleys
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 6
Single-Area OSPF City Design
R1# show ip ospf database
OSPF Router with ID (1.1.1.1) (Process ID 1)
Router Link States (Area 0)
Link ID ADV Router Age Seq# Checksum Link
count
1.1.1.1 1.1.1.1 728 0x80000005 0x001701 4
6.6.6.6 6.6.6.6 698 0x80000002 0x005ba8 1
3.3.3.3 3.3.3.3 693 0x80000007 0x00c181 4
7.7.7.7 7.7.7.7 693 0x80000002 0x0025d4 1
5.5.5.5 5.5.5.5 693 0x80000002 0x00917c 1
2.2.2.2 2.2.2.2 693 0x80000007 0x004e19 4
4.4.4.4 4.4.4.4 693 0x80000003 0x00c551 1
Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
10.1.3.2 6.6.6.6 698 0x80000001 0x00a70b
10.1.4.2 7.7.7.7 693 0x80000001 0x00a442
10.1.2.2 5.5.5.5 693 0x80000001 0x009920
10.1.1.2 4.4.4.4 693 0x80000001 0x002479
R1#
Multiarea OSPF City Design
R1# show ip ospf database
OSPF Router with ID (1.1.1.1) (Process ID 1)
Router Link States (Area 0)
Link ID ADV Router Age Seq# Checksum Link
count
2.2.2.2 2.2.2.2 716 0x80000003 0x0020a2 2
3.3.3.3 3.3.3.3 715 0x80000003 0x00297d 2
1.1.1.1 1.1.1.1 715 0x80000005 0x00d443 4
Summary Net Link States (Area 0)
Link ID ADV Router Age Seq# Checksum
10.1.3.0 3.3.3.3 681 0x80000001 0x0089ba
10.1.4.0 3.3.3.3 681 0x80000002 0x007cc5
10.1.2.0 2.2.2.2 676 0x80000001 0x00b296
10.1.1.0 2.2.2.2 676 0x80000002 0x00bb8d
R1#
Single-Area OSPF City Design
R1# show ip ospf 1
Routing Process "ospf 1" with ID 1.1.1.1
Supports only single TOS(TOS0) routes
Supports opaque LSA
SPF schedule delay 5 secs, Hold time between two SPFs 10 secs
Minimum LSA interval 5 secs. Minimum LSA arrival 1 secs
Number of external LSA 0. Checksum Sum 0x000000
Number of opaque AS LSA 0. Checksum Sum 0x000000
Number of DCbitless external and opaque AS LSA 0
Number of DoNotAge external and opaque AS LSA 0
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
External flood list length 0
Area BACKBONE(0)
Number of interfaces in this area is 2
Area has no authentication
SPF algorithm executed 3 times
Area ranges are
Number of LSA 11. Checksum Sum 0x0507ca
Multiarea OSPF City Design
R1# show ip ospf 1
Routing Process "ospf 1" with ID 1.1.1.1
Supports only single TOS(TOS0) routes
Supports opaque LSA
SPF schedule delay 5 secs, Hold time between two SPFs 10 secs
Minimum LSA interval 5 secs. Minimum LSA arrival 1 secs
Number of external LSA 0. Checksum Sum 0x000000
Number of opaque AS LSA 0. Checksum Sum 0x000000
Number of DCbitless external and opaque AS LSA 0
Number of DoNotAge external and opaque AS LSA 0
Number of areas in this router is 1. 1 normal 0 stub 0 nssa
External flood list length 0
Area BACKBONE(0)
Number of interfaces in this area is 2
Area has no authentication
SPF algorithm executed 3 times
Area ranges are
Number of LSA 7. Checksum Sum 0x039304
Digital Trolleys
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 6
Number of opaque link LSA 0. Checksum Sum 0x000000
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
R1#
Number of opaque link LSA 0. Checksum Sum 0x000000
Number of DCbitless LSA 0
Number of indication LSA 0
Number of DoNotAge LSA 0
Flood list length 0
R1#
Identify elements of the model that map to IT-related content:
Backbone router
Border area router
Core area
OSPF verification commands
- show ip protocols
- show ip ospf database
- show ip ospf
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 2
Classless EIGRP (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
Describe the basic features of EIGRP.
EIGRP is introduced to students through the informative video, Fundamental Configuration and Verification of EIGRP. After viewing the video, students should be able to explain how classless routing occurs, what is involved in auto-summarization of network addresses, and how EIGRP is configured.
Students are not expected to memorize the facts from the video, as it is being viewed to introduce students to the concept of EIGRP as a distance vector routing protocol.
Scenario
EIGRP was introduced as a distance vector routing protocol in 1992. It was originally designed to work as a proprietary protocol on Cisco devices only. In 2013, EIGRP became a multi-vendor routing protocol, meaning that it can be used by other device vendors in addition to Cisco devices.
View the Fundamental Configuration and Verification of EIGRP video located at http://www.cisco.com/E-
Learning/bulk/subscribed/tac/netbits/iprouting/eigrp/01_fundamental_eigrp/start.htm. In order to view the video
you must have a cisco.com account. If you do not have a cisco.com account, please register to create one.
While viewing the video, pay close attention to the following concepts and terms:
Subnet mask reporting to routing tables for classful and classless networks
Auto-summarization of networks in routing tables
Autonomous system numbers
Wildcard masks
Passive interfaces
EIGRP configuration commands
EIGRP verification commands
Complete the reflection questions which accompany the PDF file for this activity. Save your work and be prepared to share your answers with the class.
Resources
Internet access
Reflection
1. Explain classful routing protocols. _______________________________________________________________________________________ Classful routing protocols do not include the subnet mask in the routing update.
2. Explain classless routing protocols. _______________________________________________________________________________________ Classless routing protocols do include the subnet mask in the routing update.
3. What is network auto-summarization?
Classless EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 2
__________________________________________________________________ Auto-summarization allows routing tables to be reduced in size by representing several subnetted networks as one summarized network.
4. What is an autonomous system number?
__________________________________________________________________ An autonomous system number is used in EIGRP configuration to define all routers belonging to a specific group to exchange EIGRP neighbor and update information.
5. What are wildcard masks?
__________________________________________________________________ Wildcard masks are the inverse of subnet masks. They indicate how many hosts are available within subnets and are used as a part of the EIGRP configuration process to indicate specific, subnetted networks.
6. What is a passive interface?
__________________________________________________________________ A passive interface is a network link configured to not participate in the EIGRP reporting process.
7. Is EIGRP considered a distance-vector or a link-state routing protocol?
__________________________________________________________________ Like RIP, EIGRP is considered a distance vector routing protocol.
Identify elements of the model that map to IT-related content:
Auto-summarization
Classless routing
Wildcard masks
Passive interfaces
EIGRP routing protocol
Distance vector routing protocol
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 16
Lab – Configuring Basic EIGRP for IPv4 (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 16
Addressing Table
Device Interface IP Address Subnet Mask Default Gateway
R1 G0/0 192.168.1.1 255.255.255.0 N/A
S0/0/0 (DCE) 10.1.1.1 255.255.255.252 N/A
S0/0/1 10.3.3.1 255.255.255.252 N/A
R2 G0/0 192.168.2.1 255.255.255.0 N/A
S0/0/0 10.1.1.2 255.255.255.252 N/A
S0/0/1 (DCE) 10.2.2.2 255.255.255.252 N/A
R3 G0/0 192.168.3.1 255.255.255.0 N/A
S0/0/0 (DCE) 10.3.3.2 255.255.255.252 N/A
S0/0/1 10.2.2.1 255.255.255.252 N/A
PC-A NIC 192.168.1.3 255.255.255.0 192.168.1.1
PC-B NIC 192.168.2.3 255.255.255.0 192.168.2.1
PC-C NIC 192.168.3.3 255.255.255.0 192.168.3.1
Objectives
Part 1: Build the Network and Verify Connectivity
Part 2: Configure EIGRP Routing
Part 3: Verify EIGRP Routing
Part 4: Configure Bandwidth and Passive Interfaces
Background / Scenario
Enhanced Interior Gateway Routing Protocol (EIGRP) is a powerful distance vector routing protocol and is relatively easy to configure for basic networks.
In this lab, you will configure EIGRP for the topology and networks shown above. You will modify bandwidth and configure passive interfaces to allow EIGRP to function more efficiently.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 16
Ethernet and serial cables as shown in the topology
Part 1: Build the Network and Verify Connectivity
In Part 1, you will set up the network topology and configure basic settings, such as the interface IP addresses, device access, and passwords.
Step 1: Cable the network as shown in the topology.
Step 2: Configure PC hosts.
Step 3: Initialize and reload the routers as necessary.
Step 4: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure IP addresses for the routers, as listed in the Addressing Table.
c. Configure device name as shown in the topology.
d. Assign cisco as the console and vty passwords.
e. Assign class as the privileged EXEC password.
f. Configure logging synchronous to prevent console and vty messages from interrupting command entry.
g. Configure a message of the day.
h. Copy the running configuration to the startup configuration.
Step 5: Verify connectivity.
The routers should be able to ping one another, and each PC should be able to ping its default gateway. The PCs will not be able to ping other PCs until EIGRP routing is configured. Verify and troubleshoot if necessary.
Part 2: Configure EIGRP Routing
Step 1: Enable EIGRP routing on R1. Use AS number 10.
R1(config)# router eigrp 10
Step 2: Advertise the directly connected networks on R1 using the wildcard mask.
R1(config-router)# network 10.1.1.0 0.0.0.3
R1(config-router)# network 192.168.1.0 0.0.0.255
R1(config-router)# network 10.3.3.0 0.0.0.3
Why is it a good practice to use wildcard masks when advertising networks? Could the mask have been omitted from any of the network statements above? If so, which one(s)?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
You should only advertise networks that you control. In earlier versions of EIGRP, classful boundaries were assumed meaning that the whole network space was advertised. For example, when advertising the 10.1.1.0
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 16
network, the 10.0.0.0/8 could be assumed. The wildcard mask could have been omitted from the 192.168.1.0 network statement because EIGRP would automatically assume the 0.0.0.255 classful mask.
Step 3: Enable EIGRP routing and advertise the directly connected networks on R2 and R3.
You will see neighbor adjacency messages as interfaces are added to the EIGRP routing process. The messages on R2 are displayed as an example.
*Apr 14 15:24:59.543: %DUAL-5-NBRCHANGE: EIGRP-IPv4 10: Neighbor 10.1.1.1
(Serial0/0/0) is up: new adjacency
Step 4: Verify end-to-end connectivity.
All devices should be able to ping each other if EIGRP is configured correctly.
Note: Depending on the operating system, it may be necessary to disable the firewall for the pings to the host PCs to be successful.
Part 3: Verify EIGRP Routing
Step 1: Examine the EIGRP neighbor table.
On R1, issue the show ip eigrp neighbors command to verify that the adjacency has been established with its neighboring routers.
R1# show ip eigrp neighbors
EIGRP-IPv4 Neighbors for AS(10)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 10.3.3.2 Se0/0/1 13 00:24:58 8 100 0 17
0 10.1.1.2 Se0/0/0 13 00:29:23 7 100 0 23
Step 2: Examine the IP EIGRP routing table.
R1# show ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
D 10.2.2.0/30 [90/2681856] via 10.3.3.2, 00:29:01, Serial0/0/1
[90/2681856] via 10.1.1.2, 00:29:01, Serial0/0/0
D 192.168.2.0/24 [90/2172416] via 10.1.1.2, 00:29:01, Serial0/0/0
D 192.168.3.0/24 [90/2172416] via 10.3.3.2, 00:27:56, Serial0/0/1
Why does R1 have two paths to the 10.2.2.0/30 network?
_______________________________________________________________________________________
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 16
EIGRP automatically does equal-cost load balancing. R1 has two ways to reach the 10.2.2.0/30 network.
Step 3: Examine the EIGRP topology table.
R1# show ip eigrp topology
EIGRP-IPv4 Topology Table for AS(10)/ID(192.168.1.1)
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - reply Status, s - sia Status
P 192.168.3.0/24, 1 successors, FD is 2172416
via 10.3.3.2 (2172416/28160), Serial0/0/1
P 192.168.2.0/24, 1 successors, FD is 2172416
via 10.1.1.2 (2172416/28160), Serial0/0/0
P 10.2.2.0/30, 2 successors, FD is 2681856
via 10.1.1.2 (2681856/2169856), Serial0/0/0
via 10.3.3.2 (2681856/2169856), Serial0/0/1
P 10.3.3.0/30, 1 successors, FD is 2169856
via Connected, Serial0/0/1
P 192.168.1.0/24, 1 successors, FD is 2816
via Connected, GigabitEthernet0/0
P 10.1.1.0/30, 1 successors, FD is 2169856
via Connected, Serial0/0/0
Why are there no feasible successors listed in the R1 topology table?
_______________________________________________________________________________________
The feasibility condition (FC) has not been met.
Step 4: Verify the EIGRP routing parameters and networks advertised.
Issue the show ip protocols command to verify the EIGRP routing parameters used.
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "eigrp 10"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP-IPv4 Protocol for AS(10)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 192.168.1.1
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 4
Maximum hopcount 100
Maximum metric variance 1
Automatic Summarization: disabled
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 16
Maximum path: 4
Routing for Networks:
10.1.1.0/30
10.3.3.0/30
192.168.1.0
Routing Information Sources:
Gateway Distance Last Update
10.3.3.2 90 02:38:34
10.1.1.2 90 02:38:34
Distance: internal 90 external 170
Based on the output of issuing the show ip protocols command, answer the following questions.
What AS number is used? _____ 10
What networks are advertised?
_______________________________________________________________________________________
10.1.1.0/30, 10.3.3.0/30, and 192.168.1.0/24
What is the administrative distance for EIGRP? _________________________ 90 internal and 170 external
How many equal cost paths does EIGRP use by default? _____ 4
Part 4: Configure Bandwidth and Passive Interfaces
EIGRP uses a default bandwidth based on the type of interface in the router. In Part 4, you will modify the bandwidth so that the link between R1 and R3 has a lower bandwidth than the link between R1/R2 and R2/R3. In addition, you will set passive interfaces on each router.
Step 1: Observe the current routing settings.
a. Issue the show interface s0/0/0 command on R1.
R1# show interface s0/0/0
Serial0/0/0 is up, line protocol is up
Hardware is WIC MBRD Serial
Internet address is 10.1.1.1/30
MTU 1500 bytes, BW 1544 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation HDLC, loopback not set
Keepalive set (10 sec)
Last input 00:00:01, output 00:00:02, output hang never
Last clearing of "show interface" counters 03:43:45
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
4050 packets input, 270294 bytes, 0 no buffer
Received 1554 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
1 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 1 abort
4044 packets output, 271278 bytes, 0 underruns
0 output errors, 0 collisions, 5 interface resets
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 16
4 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
12 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up
What is the default bandwidth for this serial interface?
____________________________________________________________________________________
Answers will vary based on serial card in router. Based on output here, bandwidth is 1544 Kbps.
b. How many routes are listed in the routing table to reach the 10.2.2.0/30 network? _______________ 2
R1# show ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
D 10.2.2.0/30 [90/2681856] via 10.3.3.2, 00:29:01, Serial0/0/1
[90/2681856] via 10.1.1.2, 00:29:01, Serial0/0/0
D 192.168.2.0/24 [90/2172416] via 10.1.1.2, 00:29:01, Serial0/0/0
D 192.168.3.0/24 [90/2172416] via 10.3.3.2, 00:27:56, Serial0/0/1
Step 2: Modify the bandwidth on the routers.
a. Modify the bandwidth on R1 for the serial interfaces.
R1(config)# interface s0/0/0
R1(config-if)# bandwidth 2000
R1(config-if)# interface s0/0/1
R1(config-if)# bandwidth 64
Issue show ip route command on R1. Is there a difference in the routing table? If so, what is it?
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 5 subnets, 2 masks
C 10.1.1.0/30 is directly connected, Serial0/0/0
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 16
L 10.1.1.1/32 is directly connected, Serial0/0/0
D 10.2.2.0/30 [90/2681856] via 10.1.1.2, 00:03:09, Serial0/0/0
C 10.3.3.0/30 is directly connected, Serial0/0/1
L 10.3.3.1/32 is directly connected, Serial0/0/1
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, GigabitEthernet0/0
L 192.168.1.1/32 is directly connected, GigabitEthernet0/0
D 192.168.2.0/24 [90/1794560] via 10.1.1.2, 00:03:09, Serial0/0/0
D 192.168.3.0/24 [90/2684416] via 10.1.1.2, 00:03:08, Serial0/0/0
____________________________________________________________________________________
____________________________________________________________________________________
After the change in bandwidth, there is only one route showing for the 10.2.2.0/30 network via 10.1.1.2 and S0/0/0. This is the preferred link because it is a faster link. Before the change in bandwidth, there were two equal cost paths to the destination; therefore, there were two entries in the routing table.
b. Modify the bandwidth on the R2 and R3 serial interfaces.
R2(config)# interface s0/0/0
R2(config-if)# bandwidth 2000
R2(config-if)# interface s0/0/1
R2(config-if)# bandwidth 2000
R3(config)# interface s0/0/0
R3(config-if)# bandwidth 64
R3(config-if)# interface s0/0/1
R3(config-if)# bandwidth 2000
Step 3: Verify the bandwidth modifications.
a. Verify bandwidth modifications. Issue a show interface serial 0/0/x command, with x being the appropriate serial interface on all three routers to verify that bandwidth is set correctly. R1 is shown as an example.
R1# show interface s0/0/0
Serial0/0/0 is up, line protocol is up
Hardware is WIC MBRD Serial
Internet address is 10.1.1.1/30
MTU 1500 bytes, BW 2000 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation HDLC, loopback not set
Keepalive set (10 sec)
Last input 00:00:01, output 00:00:02, output hang never
Last clearing of "show interface" counters 04:06:06
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
4767 packets input, 317155 bytes, 0 no buffer
Received 1713 broadcasts (0 IP multicasts)
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 16
0 runts, 0 giants, 0 throttles
1 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 1 abort
4825 packets output, 316451 bytes, 0 underruns
0 output errors, 0 collisions, 5 interface resets
4 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
12 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up
Based on your bandwidth configuration, try and determine what the R2 and R3 routing tables will look like before you issue a show ip route command. Are their routing tables the same or different?
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R2 routing table will be the same as before. It will still have 2 equal cost routes to the 10.3.3.0/30 network. R3 routing table will now only have 1 route to the 10.1.1.0/30 network via R2.
Step 4: Configure G0/0 interface as passive on R1, R2, and R3.
A passive interface does not allow outgoing and incoming routing updates over the configured interface. The passive-interface interface command causes the router to stop sending and receiving Hello packets over an interface; however, the network associated with the interface is still advertised to other routers through the non-passive interfaces. Router interfaces connected to LANs are typically configured as passive.
R1(config)# router eigrp 10
R1(config-router)# passive-interface g0/0
R2(config)# router eigrp 10
R2(config-router)# passive-interface g0/0
R3(config)# router eigrp 10
R3(config-router)# passive-interface g0/0
Step 5: Verify the passive interface configuration.
Issue a show ip protocols command on R1, R2, and R3 and verify that G0/0 has been configured as passive.
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "eigrp 10"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP-IPv4 Protocol for AS(10)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 192.168.1.1
Topology : 0 (base)
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 16
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 4
Maximum hopcount 100
Maximum metric variance 1
Automatic Summarization: disabled
Maximum path: 4
Routing for Networks:
10.1.1.0/30
10.3.3.0/30
192.168.1.0
Passive Interface(s):
GigabitEthernet0/0
Routing Information Sources:
Gateway Distance Last Update
10.3.3.2 90 00:48:09
10.1.1.2 90 00:48:26
Distance: internal 90 external 170
Reflection
You could have used only static routing for this lab. What is an advantage of using EIGRP?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
EIGRP can automatically adjust for network topology changes such as adding networks, or networks going down. EIGRP automatically picks the best path when the bandwidth of a link is modified, and it will automatically load balance across multiple equal cost paths.
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 16
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs
Router R1
R1#sh run
Building configuration...
Current configuration : 1455 bytes
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
!
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 16
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 2000
ip address 10.1.1.1 255.255.255.252
clock rate 128000
!
interface Serial0/0/1
bandwidth 64
ip address 10.3.3.1 255.255.255.252
!
!
router eigrp 10
network 10.1.1.0 0.0.0.3
network 10.3.3.0 0.0.0.3
network 192.168.1.0
passive-interface GigabitEthernet0/0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 16
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
logging synchronous
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
R2#sh run
Building configuration...
Current configuration : 1457 bytes
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.2.1 255.255.255.0
duplex auto
speed auto
!
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 16
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 2000
ip address 10.1.1.2 255.255.255.252
!
interface Serial0/0/1
bandwidth 2000
ip address 10.2.2.2 255.255.255.252
clock rate 128000
!
!
router eigrp 10
network 10.1.1.0 0.0.0.3
network 10.2.2.0 0.0.0.3
network 192.168.2.0
passive-interface GigabitEthernet0/0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
logging synchronous
login
transport input all
!
scheduler allocate 20000 1000
!
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 16
end
Router R3
R3#sh run
Building configuration...
Current configuration : 1455 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 64
ip address 10.3.3.2 255.255.255.252
clock rate 128000
Lab – Configuring Basic EIGRP for IPv4
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 16
!
interface Serial0/0/1
bandwidth 2000
ip address 10.2.2.1 255.255.255.252
!
!
router eigrp 10
network 10.2.2.0 0.0.0.3
network 10.3.3.0 0.0.0.3
network 192.168.3.0
passive-interface GigabitEthernet0/0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
control-plane
!
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
logging synchronous
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 17
Lab - Configuring Basic EIGRP for IPv6 (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 17
Addressing Table
Device Interface IP Address Default Gateway
R1 G0/0
2001:DB8:ACAD:A::1/64
FE80::1 link-local N/A
S0/0/0 (DCE)
2001:DB8:ACAD:12::1/64
FE80::1 link-local N/A
S0/0/1
2001:DB8:ACAD:13::1/64
FE80::1 link-local N/A
R2 G0/0
2001:DB8:ACAD:B::1/64
FE80::2 link-local N/A
S0/0/0
2001:DB8:ACAD:12::2/64
FE80::2 link-local N/A
S0/0/1 (DCE)
2001:DB8:ACAD:23::2/64
FE80::2 link-local N/A
R3 G0/0
2001:DB8:ACAD:C::1/64
FE80::3 link-local N/A
S0/0/0 (DCE)
2001:DB8:ACAD:13::3/64
FE80::3 link-local N/A
S0/0/1
2001:DB8:ACAD:23::3/64
FE80::3 link-local N/A
PC-A NIC 2001:DB8:ACAD:A::3/64 FE80::1
PC-B NIC 2001:DB8:ACAD:B::3/64 FE80::2
PC-C NIC 2001:DB8:ACAD:C::3/64 FE80::3
Objectives
Part 1: Build the Network and Verify Connectivity
Part 2: Configure EIGRP for IPv6 Routing
Part 3: Verify EIGRP for IPv6 Routing
Part 4: Configure and Verify Passive Interfaces
Background / Scenario
EIGRP for IPv6 has the same overall operation and features as EIGRP for IPv4. However, there are a few major differences between them:
EIGRP for IPv6 is configured directly on the router interfaces.
With EIGRP for IPv6, a router ID is required on each router or the routing process does not start.
The EIGRP for IPv6 routing process uses a shutdown feature.
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 17
In this lab, you will configure the network with EIGRP routing for IPv6. You will also assign router IDs, configure passive interfaces, verify the network is fully converged, and display routing information using CLI show commands.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet and serial cables as shown in the topology
Part 1: Build the Network and Verify Connectivity
In Part 1, you will set up the network topology and configure basic settings, such as the interface IP addresses, device access, and passwords.
Step 1: Cable the network as shown in the topology.
Step 2: Configure PC hosts.
Step 3: Initialize and reload the routers as necessary.
Step 4: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure IP addresses for the routers as listed in Addressing Table.
Note: Configure the FE80::x link-local address and the unicast address for each router interface.
c. Configure the device name as shown in the topology.
d. Assign cisco as the console and vty passwords.
e. Assign class as the privileged EXEC password.
f. Configure logging synchronous to prevent console and vty messages from interrupting command entry.
g. Configure a message of the day.
h. Copy the running configuration to the startup configuration.
Step 5: Verify connectivity.
The routers should be able to ping one another, and each PC should be able to ping its default gateway. The PCs will not be able to ping other PCs until EIGRP routing is configured. Verify and troubleshoot if necessary.
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 17
Part 2: Configure EIGRP for IPv6 Routing
Step 1: Enable IPv6 routing on the routers.
R1(config)# ipv6 unicast-routing
Step 2: Assign a router ID to each router.
a. To begin the EIGRP for IPv6 routing configuration process, issue the ipv6 router eigrp 1 command, where 1 is the AS number.
R1(config)# ipv6 router eigrp 1
b. EIGRP for IPv6 requires a 32-bit address for the router ID. Use the router-id command to configure the router ID in the router configuration mode.
R1(config)# ipv6 router eigrp 1
R1(config-rtr)# eigrp router-id 1.1.1.1
R2(config)# ipv6 router eigrp 1
R2(config-rtr)# eigrp router-id 2.2.2.2
R3(config)# ipv6 router eigrp 1
R3(config-rtr)# eigrp router-id 3.3.3.3
Step 3: Enable EIGRP for IPv6 routing on each router.
The IPv6 routing process is shut down by default. Issue the no shutdown command to enable EIGRP for IPv6 routing on all routers.
R1(config)# ipv6 router eigrp 1
R1(config-rtr)# no shutdown
R2(config)# ipv6 router eigrp 1
R2(config-rtr)# no shutdown
R3(config)# ipv6 router eigrp 1
R3(config-rtr)# no shutdown
Step 4: Configure EIGRP for IPv6 using AS 1 on the Serial and Gigabit Ethernet interfaces on
the routers.
a. Issue the ipv6 eigrp 1 command on the interfaces that participate in the EIGRP routing process. The AS number is 1 as assigned in Step 2. The configuration for R1 is displayed below as an example.
R1(config)# interface g0/0
R1(config-if)# ipv6 eigrp 1
R1(config-if)# interface s0/0/0
R1(config-if)# ipv6 eigrp 1
R1(config-if)# interface s0/0/1
R1(config-if)# ipv6 eigrp 1
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 17
b. Assign EIGRP participating interfaces on R2 and R3. You will see neighbor adjacency messages as interfaces are added to the EIGRP routing process. The messages on R1 are displayed below as an example.
R1(config-if)#
*Apr 12 00:25:49.183: %DUAL-5-NBRCHANGE: EIGRP-IPv6 1: Neighbor FE80::2 (Serial0/0/0)
is up: new adjacency
*Apr 12 00:26:15.583: %DUAL-5-NBRCHANGE: EIGRP-IPv6 1: Neighbor FE80::3 (Serial0/0/1)
is up: new adjacency
What address is used to indicate the neighbor in the adjacency messages? _____________________
The link-local address (FE80::x) of the neighbor’s interface, which was assigned in Part 1 Step 4.
Step 5: Verify end-to-end connectivity.
Part 3: Verify EIGRP for IPv6 Routing
Step 1: Examine the neighbor adjacencies.
On R1, issue the show ipv6 eigrp neighbors command to verify that the adjacency has been established with its neighboring routers. The link-local addresses of the neighboring routers are displayed in the adjacency table.
R1# show ipv6 eigrp neighbors
EIGRP-IPv6 Neighbors for AS(1)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 Link-local address: Se0/0/1 13 00:02:42 1 100 0 7
FE80::3
0 Link-local address: Se0/0/0 13 00:03:09 12 100 0 9
FE80::2
Step 2: Examine the IPv6 EIGRP routing table.
Use the show ipv6 route eigrp command to display IPv6 specific EIGRP routes on all the routers.
R1# show ipv6 route eigrp
IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
D 2001:DB8:ACAD:B::/64 [90/2172416]
via FE80::2, Serial0/0/0
D 2001:DB8:ACAD:C::/64 [90/2172416]
via FE80::3, Serial0/0/1
D 2001:DB8:ACAD:23::/64 [90/2681856]
via FE80::2, Serial0/0/0
via FE80::3, Serial0/0/1
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 17
Step 3: Examine the EIGRP topology.
R1# show ipv6 eigrp topology
EIGRP-IPv6 Topology Table for AS(1)/ID(1.1.1.1)
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - reply Status, s - sia Status
P 2001:DB8:ACAD:A::/64, 1 successors, FD is 28160
via Connected, GigabitEthernet0/0
P 2001:DB8:ACAD:C::/64, 1 successors, FD is 2172416
via FE80::3 (2172416/28160), Serial0/0/1
P 2001:DB8:ACAD:12::/64, 1 successors, FD is 2169856
via Connected, Serial0/0/0
P 2001:DB8:ACAD:B::/64, 1 successors, FD is 2172416
via FE80::2 (2172416/28160), Serial0/0/0
P 2001:DB8:ACAD:23::/64, 2 successors, FD is 2681856
via FE80::2 (2681856/2169856), Serial0/0/0
via FE80::3 (2681856/2169856), Serial0/0/1
P 2001:DB8:ACAD:13::/64, 1 successors, FD is 2169856
via Connected, Serial0/0/1
Compare the highlighted entries to the routing table. What can you conclude from the comparison?
______________________________________________________________________________________
______________________________________________________________________________________
______________________________________________________________________________________
The topology table lists all the available routes to a destination. The routing table lists the best path to a destination.
Step 4: Verify the parameters and current state of the active IPv6 routing protocol processes.
Issue the show ipv6 protocols command to verify the configured parameter. From the output, EIGRP is the configured IPv6 routing protocol with 1.1.1.1 as the router ID for R1. This routing protocol is associated with autonomous system 1 with three active interfaces: G0/0, S0/0/0, and S0/0/1.
R1# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "eigrp 1"
EIGRP-IPv6 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 1.1.1.1
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 16
Maximum hopcount 100
Maximum metric variance 1
Interfaces:
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 17
GigabitEthernet0/0
Serial0/0/0
Serial0/0/1
Redistribution:
None
Part 4: Configure and Verify Passive Interfaces
A passive interface does not allow outgoing and incoming routing updates over the configured interface. The passive-interface interface command causes the router to stop sending and receiving Hello packets over an interface.
Step 1: Configure interface G0/0 as passive on R1 and R2.
R1(config)# ipv6 router eigrp 1
R1(config-rtr)# passive-interface g0/0
R2(config)# ipv6 router eigrp 1
R2(config-rtr)# passive-interface g0/0
Step 2: Verify the passive interface configuration.
Issue the show ipv6 protocols command on R1 and verify that G0/0 has been configured as passive.
R1# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "eigrp 1"
EIGRP-IPv6 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 1.1.1.1
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 16
Maximum hopcount 100
Maximum metric variance 1
Interfaces:
Serial0/0/0
Serial0/0/1
GigabitEthernet0/0 (passive)
Redistribution:
None
Step 3: Configure the G0/0 passive interface on R3.
If a few interfaces are configured as passive, use the passive-interface default command to configure all the interfaces on the router as passive. Use the no passive-interface interface command to allow EIGRP Hello messages in and out of the router interface.
a. Configure all interfaces as passive on R3.
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 17
R3(config)# ipv6 router eigrp 1
R3(config-rtr)# passive-interface default
R3(config-rtr)#
*Apr 13 00:07:03.267: %DUAL-5-NBRCHANGE: EIGRP-IPv6 1: Neighbor FE80::1 (Serial0/0/0)
is down: interface passive
*Apr 13 00:07:03.267: %DUAL-5-NBRCHANGE: EIGRP-IPv6 1: Neighbor FE80::2 (Serial0/0/1)
is down: interface passive
b. After you have issued the passive-interface default command, R3 no longer participates in the routing process. What command can you use to verify it?
____________________________________________________________________________________
show ipv6 route eigrp or show ipv6 route
R3# show ipv6 route eigrp
IPv6 Routing Table - default - 7 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
c. What command can you use to display the passive interfaces on R3?
____________________________________________________________________________________
show ipv6 protocols
R3# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "eigrp 1"
EIGRP-IPv6 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 3.3.3.3
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 16
Maximum hopcount 100
Maximum metric variance 1
Interfaces:
GigabitEthernet0/0 (passive)
Serial0/0/0 (passive)
Serial0/0/1 (passive)
Redistribution:
None
d. Configure the serial interfaces to participate in the routing process.
R3(config)# ipv6 router eigrp 1
R3(config-rtr)# no passive-interface s0/0/0
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 17
R3(config-rtr)# no passive-interface s0/0/1
R3(config-rtr)#
*Apr 13 00:21:23.807: %DUAL-5-NBRCHANGE: EIGRP-IPv6 1: Neighbor FE80::1 (Serial0/0/0)
is up: new adjacency
*Apr 13 00:21:25.567: %DUAL-5-NBRCHANGE: EIGRP-IPv6 1: Neighbor FE80::2 (Serial0/0/1)
is up: new adjacency
e. The neighbor relationships have been established again with R1 and R2. Verify that only G0/0 has been configured as passive. What command do you use to verify the passive interface?
____________________________________________________________________________________
show ipv6 protocols
R3# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "eigrp 1"
EIGRP-IPv6 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 3.3.3.3
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 16
Maximum hopcount 100
Maximum metric variance 1
Interfaces:
Serial0/0/0
Serial0/0/1
GigabitEthernet0/0 (passive)
Redistribution:
None
Reflection
1. Where would you configure passive interfaces? Why?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Passive interfaces are usually configured on router interfaces that are not connected to other routers. Passive interfaces limit the amount of unnecessary protocol traffic in the network because no router devices are receiving the messages on the other side of the link.
2. What are some advantages with using EIGRP as the routing protocol in your network?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 17
EIGRP routing protocol can be used with almost any size network using IPv4 or IPv6. It also uses less CPU than other dynamic routing protocols, such as OSPF. It requires little bandwidth for routing updates.
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs
Router R1
R1# show run
Building configuration...
Current configuration : 1632 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 17
memory-size iomem 15
!
ip cef
!
!
!
!
!
!
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:A::1/64
ipv6 eigrp 1
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 eigrp 1
clock rate 128000
!
interface Serial0/0/1
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 17
no ip address
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:13::1/64
ipv6 eigrp 1
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
ipv6 router eigrp 1
passive-interface GigabitEthernet0/0
eigrp router-id 1.1.1.1
!
!
!
!
control-plane
!
!
!
line con 0
password cisco
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
line vty 5 15
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
R2# show run
Building configuration...
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 17
Current configuration : 1633 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
!
!
!
!
!
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
ipv6 address FE80::2 link-local
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 17
ipv6 address 2001:DB8:ACAD:B::1/64
ipv6 eigrp 1
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:12::2/64
ipv6 eigrp 1
!
interface Serial0/0/1
no ip address
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
ipv6 eigrp 1
clock rate 2000000
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
ipv6 router eigrp 1
passive-interface GigabitEthernet0/0
eigrp router-id 2.2.2.2
!
!
!
!
control-plane
!
!
!
line con 0
password cisco
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 17
stopbits 1
line vty 0 4
password cisco
login
transport input all
line vty 5 15
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R3
R3# show run
Building configuration...
Current configuration : 1672 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
!
!
!
!
!
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
!
!
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 17
!
!
!
!
!
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:C::1/64
ipv6 eigrp 1
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:13::3/64
ipv6 eigrp 1
clock rate 2000000
!
interface Serial0/0/1
no ip address
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:23::3/64
ipv6 eigrp 1
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
ipv6 router eigrp 1
passive-interface default
no passive-interface Serial0/0/0
no passive-interface Serial0/0/1
eigrp router-id 3.3.3.3
!
Lab - Configuring Basic EIGRP for IPv6
© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 17
!
!
!
control-plane
!
!
!
line con 0
password cisco
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
line vty 5 15
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 4
Portfolio RIP and EIGRP (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
Configure EIGRP for IPv4 in a small routed network (review).
The purpose of this activity is to review EIGRP routing protocol concepts and to compare/contrast RIP and EIGRP as distance-vector routing protocols.
Scenario
You are preparing a portfolio file for comparison of RIP and EIGRP routing protocols.
Think of a network with three interconnected routers with each router providing a LAN for PCs, printers, and other end devices. The graphic on this page depicts one example of a topology like this.
In this modeling activity scenario, you will be creating, addressing and configuring a topology, using verification commands, and comparing/contrasting RIP and EIGRP routing protocol outputs.
Complete the PDF reflection questions. Save your work and be prepared to share your answers with the class. Also save a copy of this activity for later use within this course or for portfolio reference.
Resources
Packet Tracer and word processing software programs
Directions
Step 1: WAN and LAN topology design
a. Use Packet Tracer to design a network with three routers (1941 model, suggested). If necessary, add NIC cards to the routers to provide connectivity to the routers to provide for at least one LAN to each router. Add at least one PC to each LAN.
b. Address the networks. You may use a flat addressing scheme or VLSM. Use only IPv4 networks for this entire activity.
Step 2: Copy the topology
a. Highlight the entire topology by using your cursor.
b. Use Ctrl+C to make a copy of the highlighted topology.
c. Use Ctrl+V to insert a full copy of the topology to the desktop of Packet Tracer. You will now have displayed two exact, IPv4-addressed topologies with which to work for routing protocols configurations.
d. While highlighted, move the copied topology to a different location on the Packet Tracer desktop to create room between the two for configuration purposes.
Step 3: Configure RIP and EIGRP on the separate topologies.
a. Configure the RIP routing protocol on the first topology and EIGRP on the second routing topology.
b. Once you have successfully configured RIP on one topology and EIGRP on the other, check to make sure your PCs can ping each other.
c. Save your work so no configuration information is lost.
Portfolio RIP and EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 4
Step 4: Use verification commands to check output for the routing protocols.
a. To compare/contrast routing protocol information from the two topologies, issue the show ip route command on R1 for topology 1 and 2.
b. Copy the output into a table in your word processing program file. Label each column with RIP or EIGRP and place the output you received from the show ip route command.
c. Issue the show ip protocols command on R1 for topology table 1 and 2. Create another table in your word processing software file and place the output information below RIP or EIGRP.
d. Issue the show cdp neighbors command on R1’s topology 1. Copy the output to a third table with RIP as the heading and issue the show ip eigrp neighbors command on R1’s topology 2. Copy the output from this command in column 2 of table 3 under the heading EIGRP.
Reflection
1. Compare and contrast the output for the show ip route verification command. _______________________________________________________________________________________ Answers will vary, but some answers may include: In both tables, the directly connected and link-local addresses show the same information, including subnet mask information if a flat addressing scheme was used. In the RIP table, routes to LANS are depicted by an R and an administrative distance/cost of 120/1 in all routing entries. This is the default for the RIP routing protocol. For EIGRP, routing table entries are depicted with a D and administrative distance is 90 for all LAN entries, but cost varies between the three LANs.
2. Compare and contrast the output for the show ip protocol verification command. _______________________________________________________________________________________ Answers will vary but some answers may include: RIP and EIGRP are listed as the respective routing protocols. RIP shows an update schedule (every 30 seconds), while EIGRP does not show an update schedule. The metric weight and hop count limit is listed for EIGRP for bandwidth and delay calculations purposes. There is a process ID listed for EIGRP and no process ID listed for RIP. Interfaces are listed for RIP and no interfaces are listed for EIGRP. Administrative distance for RIP is shown as a value of 120 and for EIGRP, 90.
3. Compare and contrast the show cdp neighbors command for the RIP topology and the show ip eigrp neighbors command for the EIGRP topology.
__________________________________________________________________ Both output shows directly connected neighbors information. The RIP output shows what type of routers are reporting the neighbor information and the EIGRP output does not. Interface connections are shown for both by name (Ser 0/0/0 and Ser 0/0/1). The IPv4 address is shown for interface connections on EIGRP output only.
4. After comparing and contrasting the RIP and EIGRP output, which do you find most informative? Support your answer.
__________________________________________________________________ In almost all cases, students will mention EIGRP as the most informative; although, without any advance configurations, the information is basically the same. One item students may mention, though, is that the lower the administrative distance, the better the route; therefore, in this case, the EIGRP output would be looked at as a more informative protocol.
Instructor Resource Example
The information listed in this section is only one depiction of what students could see as a result of this activity. Other topology designs, addressing schemes, interface connections and router output comparisons may vary per student groups.
Portfolio RIP and EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 4
Blank Topology Example
Sample Router Output for RIP and EIGRP configurations:
R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, GigabitEthernet0/0
L 192.168.1.1/32 is directly connected, GigabitEthernet0/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Serial0/0/0
L 192.168.2.1/32 is directly connected, Serial0/0/0
R 192.168.3.0/24 [120/1] via 192.168.2.2, 00:00:25, Serial0/0/0
[120/1] via 192.168.4.1, 00:00:10, Serial0/0/1
192.168.4.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.4.0/24 is directly connected, Serial0/0/1
L 192.168.4.2/32 is directly connected, Serial0/0/1
R 192.168.5.0/24 [120/1] via 192.168.2.2, 00:00:25, Serial0/0/0
R 192.168.6.0/24 [120/1] via 192.168.4.1, 00:00:10, Serial0/0/1
R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, GigabitEthernet0/0
L 192.168.1.1/32 is directly connected, GigabitEthernet0/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Serial0/0/0
L 192.168.2.1/32 is directly connected, Serial0/0/0
D 192.168.3.0/24 [90/2681856] via 192.168.2.2, 01:23:40, Serial0/0/0
[90/2681856] via 192.168.4.1, 01:01:12, Serial0/0/1
192.168.4.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.4.0/24 is directly connected, Serial0/0/1
L 192.168.4.2/32 is directly connected, Serial0/0/1
D 192.168.5.0/24 [90/2170112] via 192.168.2.2, 01:23:29, Serial0/0/0
D 192.168.6.0/24 [90/2170112] via 192.168.4.1, 01:01:12, Serial0/0/1
Portfolio RIP and EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 4
R1# show ip protocol
Routing Protocol is "rip"
Sending updates every 30 seconds, next due in 8 seconds
Invalid after 180 seconds, hold down 180, flushed after 240
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Redistributing: rip
Default version control: send version 1, receive any version
Interface Send Recv Triggered RIP Key-chain
GigabitEthernet0/0 1 2 1
Serial0/0/0 1 2 1
Serial0/0/1 1 2 1
Automatic network summarization is in effect
Maximum path: 4
Routing for Networks:
192.168.1.0
192.168.2.0
192.168.4.0
Passive Interface(s):
Routing Information Sources:
Gateway Distance Last Update
192.168.2.2 120 00:00:19
192.168.4.1 120 00:00:08
Distance: (default is 120)
R1# show ip protocol
Routing Protocol is "eigrp 1 "
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0
EIGRP maximum hopcount 100
EIGRP maximum metric variance 1
Redistributing: eigrp 1
Automatic network summarization is in effect
Automatic address summarization:
Maximum path: 4
Routing for Networks:
192.168.1.0
192.168.2.0
192.168.3.0
192.168.4.0
Routing Information Sources:
Gateway Distance Last Update
192.168.2.2 90 91539
192.168.4.1 90 1445980
Distance: internal 90 external 170
R1# show cdp neighbors Capability Codes: R - Router, T - Trans Bridge, B - Source
Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater, P -
Phone
Device ID Local Intrfce Holdtme Capability Platform
Port ID
R2 Ser 0/0/0 172 R C1900 Ser 0/0/0
R3 Ser 0/0/1 127 R C1900 Ser 0/0/0
R1#
R1# show ip eigrp neighbors IP-EIGRP neighbors for process 1
H Address Interface Hold Uptime SRTT RTO
Q Seq
(sec) (ms) Cnt Num
0 192.168.2.2 Se0/0/0 10 01:26:12 40 1000 0
11
1 192.168.4.1 Se0/0/1 14 01:03:38 40 1000 0
14
R1#
Identify elements of the model that map to IT-related content:
RIP routing protocol
EIGRP routing protocol
Distance vector routing protocol
Process ID for EIGRP
Administrative distance and cost
Metrics
Directly connected networks
Link local addressing
Routing tables
Neighbors
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 2
EIGRP – Back to the Future (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
Implement advanced EIGRP features to enhance operation in a small- to medium-sized business network.
EIGRP is revisited from previous content to provide the basis needed for this chapter’s content.
Scenario
Many of these bulleted concepts were mentioned in the previous chapter’s curriculum content and will be the focus of this chapter:
Auto-summarization
Load balancing
Default routes
Hold-down timers
Authentication
With a partner, write 10 EIGRP review questions based on the previous chapter’s curriculum content. Three of the questions must focus on the bulleted items above. Ideally, Multiple Choice, True/False, or Fill in the Blank question types will be designed. As you design your questions, make sure you record the curriculum section and page numbers of the supporting content in case you need to refer back for answer verification.
Save your work and then meet with another group, or the entire class, and quiz them using the questions you developed.
Resources
Word processing software program
Curriculum content from the previous chapter
Instructor Resources (previous-chapter representative example questions)
1. Fill in the blanks: If an EIGRP neighbor receives a ______ packet, it will ______ an
acknowledgment.
a. broadcast, broadcast
b. broadcast, unicast
c. multicast, unicast
d. unicast, multicast
2. By default, what metrics does EIGRP use to find the best network path? (choose all that apply)
a. MTU
b. Bandwidth
c. Load
d. Delay
e. Reliability
3. True or False: A router which receives a direct query from another router must acknowledge the
query.
EIGRP – Back to the Future
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 2
a. True
b. False
4. True or False: Multicast EIGRP packets for IPv6 are sent to FF02::10.
a. True
b. False
5. True or False: EIGRP authenticates and encrypts routing updates.
a. True
b. False
6. Load Balancing: True or False: EIGRP supports equal cost load balancing as well as unequal
cost load balancing.
a. True
b. False
7. Timers: True or False: Hold times are used to declare an EIGRP route as operational or down.
a. True
b. False
8. Timers: True or False: By default, the hold time is three times the hello interval, or 15 seconds on
most networks
a. True
b. False
9. Timers: True or False: By default, the hold time is 180 seconds and the hello interval is 60-
seconds on low speed NBMA networks
a. True
b. False
10. EIGRP uses this algorithm to accomplish fast network convergence.
a. Bellman-Ford
b. Diffused update Algorithm (DUAL)
c. Dijkstra
Identify elements of the model that map to IT-related content:
Auto-summarization
DUAL
Load balancing
Hold-down timers
Hello interval
Authentication
Multicast
Unicast
Broadcast
Encryption
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 22
Lab – Configuring Advanced EIGRP for IPv4 Features (Instructor
Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 22
Addressing Table
Device Interface IP Address Subnet Mask Default Gateway
R1 G0/0 192.168.1.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.12.1 255.255.255.252 N/A
S0/0/1 192.168.13.1 255.255.255.252 N/A
Lo1 192.168.11.1 255.255.255.252 N/A
Lo5 192.168.11.5 255.255.255.252 N/A
Lo9 192.168.11.9 255.255.255.252 N/A
Lo13 192.168.11.13 255.255.255.252 N/A
R2 G0/0 192.168.2.1 255.255.255.0 N/A
S0/0/0 192.168.12.2 255.255.255.252 N/A
S0/0/1 (DCE) 192.168.23.1 255.255.255.252 N/A
Lo1 192.168.22.1 255.255.255.252 N/A
R3 G0/0 192.168.3.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.13.2 255.255.255.252 N/A
S0/0/1 192.168.23.2 255.255.255.252 N/A
Lo1 192.168.33.1 255.255.255.252 N/A
Lo5 192.168.33.5 255.255.255.252 N/A
Lo9 192.168.33.9 255.255.255.252 N/A
Lo13 192.168.33.13 255.255.255.252 N/A
PC-A NIC 192.168.1.3 255.255.255.0 192.168.1.1
PC-B NIC 192.168.2.3 255.255.255.0 192.168.2.1
PC-C NIC 192.168.3.3 255.255.255.0 192.168.3.1
Objectives
Part 1: Build the Network and Configure Basic Device Settings
Part 2: Configure EIGRP and Verify Connectivity
Part 3: Configure Summarization for EIGRP
Configure EIGRP for automatic summarization.
Configure manual summarization for EIGRP.
Part 4: Configure and Propagate a Default Static Route
Part 5: Fine-Tune EIGRP
Configure bandwidth utilization for EIGRP.
Configure the hello interval and hold timer for EIGRP.
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 22
Part 6: Configure EIGRP Authentication
Background / Scenario
EIGRP has advanced features to allow changes related to summarization, default route propagation, bandwidth utilization, metrics, and security.
In this lab, you will configure automatic and manual summarization for EIGRP, configure EIGRP route propagation, fine-tune EIGRP metrics, and use MD5 authentication to secure EIGRP routing information.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at this end of the lab for the correct interface identifiers.
Note: Ensure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet and serial cables as shown in the topology
Part 1: Build the Network and Configure Basic Device Settings
In Part 1, you will set up the network topology and configure basic settings on the PC hosts and routers.
Step 1: Cable the network as shown in the topology.
Step 2: Configure PC hosts.
Step 3: Initialize and reload the routers as necessary.
Step 4: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure device name as shown in the topology.
c. Assign cisco as the console and vty passwords.
d. Assign class as the privileged EXEC password.
e. Configure logging synchronous to prevent console messages from interrupting command entry.
f. Configure the IP address listed in the Addressing Table for all interfaces.
Note: Do NOT configure the loopback interfaces at this time.
g. Copy the running configuration to the startup configuration.
Part 2: Configure EIGRP and Verify Connectivity
In Part 2, you will configure basic EIGRP for the topology and set bandwidths for the serial interfaces.
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 22
Note: This lab provides minimal assistance with the actual commands necessary to configure EIGRP. However, the required commands are provided in Appendix A. Test your knowledge by trying to configure the devices without referring to the appendix.
Step 1: Configure EIGRP.
a. On R1, configure EIGRP routing with an autonomous system (AS) ID of 1 for all directly connected networks. Write the commands used in the space below.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# router eigrp 1
R1(config-router)# network 192.168.1.0
R1(config-router)# network 192.168.12.0 0.0.0.3
R1(config-router)# network 192.168.13.0 0.0.0.3
b. For the LAN interface on R1, disable the transmission of EIGRP hello packets. Write the command used in the space below.
____________________________________________________________________________________
R1(config-router)# passive-interface g0/0
c. On R1, configure the bandwidth for S0/0/0 to 1024 Kb/s and the bandwidth for S0/0/1 to 64 Kb/s. Write the commands used in the space below. Note: The bandwidth command only affects the EIGRP metric calculation, not the actual bandwidth of the serial link.
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# interface s0/0/0
R1(config-if)# bandwidth 1024
R1(config-if)# interface s0/0/1
R1(config-if)# bandwidth 64
d. On R2, configure EIGRP routing with an AS ID of 1 for all networks, disable the transmission of EIGRP hello packets for the LAN interface, and configure the bandwidth for S0/0/0 to 1024 Kb/s.
e. On R3, configure EIGRP routing with an AS ID of 1 for all networks, disable the transmission of EIGRP hello packets for the LAN interface, and configure the bandwidth for S0/0/0 to 64 Kb/s.
Step 2: Test connectivity.
All PCs should be able to ping one another. Verify and troubleshoot if necessary.
Note: It may be necessary to disable the PC firewall to ping between PCs.
Part 3: Configure Summarization for EIGRP
In Part 3, you will add loopback interfaces to R1, enable EIGRP automatic summarization on R1, and observe the effects on the routing table for R2. You will also add loopback interfaces on R3.
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 22
Step 1: Configure EIGRP for automatic summarization.
a. Issue the show ip protocols command on R1. What is the default status of automatic summarization in EIGRP?
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "eigrp 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP-IPv4 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 192.168.13.1
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 4
Maximum hopcount 100
Maximum metric variance 1
Automatic Summarization: disabled
Maximum path: 4
Routing for Networks:
192.168.1.0
192.168.12.0/30
192.168.13.0/30
Passive Interface(s):
GigabitEthernet0/0
Routing Information Sources:
Gateway Distance Last Update
192.168.12.2 90 00:30:16
192.168.13.2 90 00:30:16
Distance: internal 90 external 170
____________________________________________________________________________________
Automatic network summarization is disabled.
b. Configure the loopback addresses on R1.
c. Add the appropriate network statements to the EIGRP process on R1. Record the commands used in the space below.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# router eigrp 1
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 22
R1(config-router)# network 192.168.11.0 0.0.0.3
R1(config-router)# network 192.168.11.4 0.0.0.3
R1(config-router)# network 192.168.11.8 0.0.0.3
R1(config-router)# network 192.168.11.12 0.0.0.3
d. On R2, issue the show ip route eigrp command. How are the loopback networks represented in the output?
R2# show ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
D 192.168.1.0/24 [90/3014400] via 192.168.12.1, 00:14:58, Serial0/0/0
D 192.168.3.0/24 [90/2172416] via 192.168.23.2, 00:11:18, Serial0/0/1
192.168.11.0/30 is subnetted, 4 subnets
D 192.168.11.0 [90/3139840] via 192.168.12.1, 00:00:14, Serial0/0/0
D 192.168.11.4 [90/3139840] via 192.168.12.1, 00:00:14, Serial0/0/0
D 192.168.11.8 [90/3139840] via 192.168.12.1, 00:00:14, Serial0/0/0
D 192.168.11.12 [90/3139840] via 192.168.12.1, 00:00:14, Serial0/0/0
192.168.13.0/30 is subnetted, 1 subnets
D 192.168.13.0 [90/41024000] via 192.168.23.2, 00:06:11, Serial0/0/1
[90/41024000] via 192.168.12.1, 00:06:11, Serial0/0/0
____________________________________________________________________________________
All subnetworks are listed in the routing table output.
e. On R1, issue the auto-summary command inside the EIGRP process.
R1(config)# router eigrp 1
R1(config-router)# auto-summary
R1(config-router)#
*Apr 14 01:14:55.463: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 192.168.13.2
(Serial0/0/1) is resync: summary configured
*Apr 14 01:14:55.463: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 192.168.12.2
(Serial0/0/0) is resync: summary configured
*Apr 14 01:14:55.463: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 192.168.13.2
(Serial0/0/1) is resync: summary up, remove components
R1(config-router)#67: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 192.168.12.2
(Serial0/0/0) is resync: summary up, remove components
*Apr 14 01:14:55.467: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 192.168.12.2
(Serial0/0/0) is resync: summary up, remove components
*Apr 14 01:14:55.467: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 192.168.13.2
(Serial0/0/1) is resync: summary up, remove components
How does the routing table on R2 change?
R2# show ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 22
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
D 192.168.1.0/24 [90/3014400] via 192.168.12.1, 00:01:13, Serial0/0/0
D 192.168.3.0/24 [90/2172416] via 192.168.23.2, 00:15:58, Serial0/0/1
192.168.11.0/24 is subnetted, 1 subnets
D 192.168.11.0 [90/3139840] via 192.168.12.1, 00:01:13, Serial0/0/0
192.168.12.0/24 is variably subnetted, 3 subnets, 3 masks
D 192.168.12.0/24 [90/41536000] via 192.168.23.2, 00:01:13, Serial0/0/1
192.168.13.0/24 is variably subnetted, 2 subnets, 2 masks
D 192.168.13.0/24 [90/41024000] via 192.168.12.1, 00:01:13, Serial0/0/0
D 192.168.13.0/30 [90/41024000] via 192.168.23.2, 00:01:13, Serial0/0/1
____________________________________________________________________________________
The 192.168.11.0 networks are summarized at their classful boundary.
Step 2: Configure manual summarization for EIGRP.
a. Configure the loopback addresses on R3.
b. Add the appropriate network statements to the EIGRP process on R3.
c. On R2, issue the show ip route eigrp command. How are the loopback networks from R3 represented in the output?
R2# show ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
D 192.168.1.0/24 [90/3014400] via 192.168.12.1, 00:11:50, Serial0/0/0
D 192.168.3.0/24 [90/2172416] via 192.168.23.2, 00:26:35, Serial0/0/1
192.168.11.0/24 is subnetted, 1 subnets
D 192.168.11.0 [90/3139840] via 192.168.12.1, 00:11:50, Serial0/0/0
192.168.12.0/24 is variably subnetted, 3 subnets, 3 masks
D 192.168.12.0/24 [90/41536000] via 192.168.23.2, 00:11:50, Serial0/0/1
192.168.13.0/24 is variably subnetted, 2 subnets, 2 masks
D 192.168.13.0/24 [90/41024000] via 192.168.12.1, 00:11:50, Serial0/0/0
D 192.168.13.0/30 [90/41024000] via 192.168.23.2, 00:11:50, Serial0/0/1
192.168.33.0/30 is subnetted, 3 subnets
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 22
D 192.168.33.0 [90/2297856] via 192.168.23.2, 00:00:19, Serial0/0/1
D 192.168.33.4 [90/2297856] via 192.168.23.2, 00:00:19, Serial0/0/1
D 192.168.33.8 [90/2297856] via 192.168.23.2, 00:00:19, Serial0/0/1
D 192.168.33.12 [90/2297856] via 192.168.23.2, 00:00:19, Serial0/0/1
____________________________________________________________________________________
All subnetworks are listed in the routing table.
d. Determine the summary EIGRP route for the loopback addresses on R3. Write the summary route in the space below.
____________________________________________________________________________________
192.168.33.0 255.255.255.240
e. For the serial interfaces on R3, issue the ip summary-address eigrp 1 network address subnet mask command to manually summarize the networks.
R3(config)# interface s0/0/0
R3(config-if)# ip summary-address eigrp 1 192.168.33.0 255.255.255.240
R3(config-if)# exit
R3(config)# interface s0/0/1
R3(config-if)# ip summary-address eigrp 1 192.168.33.0 255.255.255.240
*Apr 14 01:33:46.433: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 192.168.13.1
(Serial0/0/0) is resync: summary configured
*Apr 14 01:33:46.433: %DUAL-5-NBRCHANGE: EIGRP-IPv4 1: Neighbor 192.168.23.1
(Serial0/0/1) is resync: summary configured
How does the routing table on R2 change?
R2# show ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
D 192.168.1.0/24 [90/3014400] via 192.168.12.1, 00:21:32, Serial0/0/0
D 192.168.3.0/24 [90/2172416] via 192.168.23.2, 00:36:17, Serial0/0/1
192.168.11.0/24 is subnetted, 1 subnets
D 192.168.11.0 [90/3139840] via 192.168.12.1, 00:21:32, Serial0/0/0
192.168.12.0/24 is variably subnetted, 3 subnets, 3 masks
D 192.168.12.0/24 [90/41536000] via 192.168.23.2, 00:21:32, Serial0/0/1
192.168.13.0/24 is variably subnetted, 2 subnets, 2 masks
D 192.168.13.0/24 [90/41024000] via 192.168.12.1, 00:21:32, Serial0/0/0
D 192.168.13.0/30 [90/41024000] via 192.168.23.2, 00:21:32, Serial0/0/1
192.168.33.0/28 is subnetted, 1 subnets
D 192.168.33.0 [90/2297856] via 192.168.23.2, 00:02:51, Serial0/0/1
____________________________________________________________________________________
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 22
The 192.168.33.0 networks are summarized with a /28 mask.
Part 4: Configure and Propagate a Default Static Route
In Part 4, you will configure a default static route on R2 and propagate the route to all other routers.
a. Configure the loopback address on R2.
b. Configure a default static route with an exit interface of Lo1.
R2(config)# ip route 0.0.0.0 0.0.0.0 Lo1
c. Use the redistribute static command within the EIGRP process to propagate the default static route to other participating routers.
R2(config)# router eigrp 1
R2(config-router)# redistribute static
d. Use the show ip protocols command on R2 to verify the static route is being distributed.
R2# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "eigrp 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
Redistributing: static
EIGRP-IPv4 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 192.168.23.1
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 4
Maximum hopcount 100
Maximum metric variance 1
Automatic Summarization: disabled
Maximum path: 4
Routing for Networks:
192.168.2.0
192.168.12.0/30
192.168.23.0/30
Passive Interface(s):
GigabitEthernet0/0
Routing Information Sources:
Gateway Distance Last Update
192.168.12.1 90 00:13:20
192.168.23.2 90 00:13:20
Distance: internal 90 external 170
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 22
e. On R1, issue the show ip route eigrp | include 0.0.0.0 command to view statements specific to the default route. How is the static default route represented in the output? What is the administrative distance (AD) for the propagated route?
R1# show ip route eigrp | include 0.0.0.0
Gateway of last resort is 192.168.12.2 to network 0.0.0.0
D*EX 0.0.0.0/0 [170/3139840] via 192.168.12.2, 00:06:27, Serial0/0/0
____________________________________________________________________________________
____________________________________________________________________________________
As an externally learned EIGRP route:
D*EX 0.0.0.0/0 [170/3139840] via 192.168.12.2, 00:06:27, Serial0/0/0
The administrative distance is 170 as it is an external EIGRP route.
Part 5: Fine-Tune EIGRP
In Part 5, you will configure the percentage of bandwidth that can be used by an EIGRP interface and change the hello interval and hold timers for EIGRP interfaces.
Step 1: Configure bandwidth utilization for EIGRP.
a. Configure the serial link between R1 and R2 to allow only 75 percent of the link bandwidth for EIGRP traffic.
R1(config)# interface s0/0/0
R1(config-if)# ip bandwidth-percent eigrp 1 75
R2(config)# interface s0/0/0
R2(config-if)# ip bandwidth-percent eigrp 1 75
b. Configure the serial link between R1 and R3 to allow 40 percent of the links bandwidth for EIGRP traffic.
Step 2: Configure the hello interval and hold timer for EIGRP.
a. On R2, use the show ip eigrp interfaces detail command to view the hello interval and hold timer for EIGRP.
R2# show ip eigrp interfaces detail
EIGRP-IPv4 Interfaces for AS(1)
Xmit Queue PeerQ Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable Un/Reliable SRTT Un/Reliable Flow Timer Routes
Se0/0/0 1 0/0 0/0 1 0/15 50 0
Hello-interval is 5, Hold-time is 15
Split-horizon is enabled
Next xmit serial <none>
Packetized sent/expedited: 29/1
Hello's sent/expedited: 390/2
Un/reliable mcasts: 0/0 Un/reliable ucasts: 35/39
Mcast exceptions: 0 CR packets: 0 ACKs suppressed: 0
Retransmissions sent: 0 Out-of-sequence rcvd: 0
Topology-ids on interface - 0
Interface BW percentage is 75
Authentication mode is not set
Se0/0/1 1 0/0 0/0 1 0/16 50 0
Hello-interval is 5, Hold-time is 15
Split-horizon is enabled
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 22
Next xmit serial <none>
Packetized sent/expedited: 34/5
Hello's sent/expedited: 382/2
Un/reliable mcasts: 0/0 Un/reliable ucasts: 31/42
Mcast exceptions: 0 CR packets: 0 ACKs suppressed: 2
Retransmissions sent: 0 Out-of-sequence rcvd: 0
Topology-ids on interface - 0
Authentication mode is not set
What is the default value for hello time? _________________ 5 seconds
What is the default value for hold time? _________________ 15 seconds
b. Configure S0/0/0 and S0/0/1 interfaces on R1 to use a hello interval of 60 seconds and a hold time of 180 seconds in that specific order.
R1(config)# interface s0/0/0
R1(config-if)# ip hello-interval eigrp 1 60
R1(config-if)# ip hold-time eigrp 1 180
R1(config)# interface s0/0/1
R1(config-if)# ip hello-interval eigrp 1 60
R1(config-if)# ip hold-time eigrp 1 180
c. Configure the serial interfaces on R2 and R3 to use a hello interval of 60 seconds and a hold time of 180 seconds.
d. Use the show ip eigrp interfaces detail command on R2 to verify configuration.
R2# show ip eigrp interfaces detail
EIGRP-IPv4 Interfaces for AS(1)
Xmit Queue PeerQ Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable Un/Reliable SRTT Un/Reliable Flow Timer Routes
Se0/0/0 1 0/0 0/0 1 0/15 50 0
Hello-interval is 60, Hold-time is 180
Split-horizon is enabled
Next xmit serial <none>
Packetized sent/expedited: 38/1
Hello's sent/expedited: 489/4
Un/reliable mcasts: 0/0 Un/reliable ucasts: 40/48
Mcast exceptions: 0 CR packets: 0 ACKs suppressed: 0
Retransmissions sent: 0 Out-of-sequence rcvd: 0
Topology-ids on interface - 0
Interface BW percentage is 75
Authentication mode is not set
Se0/0/1 1 0/0 0/0 1 0/16 50 0
Hello-interval is 60, Hold-time is 180
Split-horizon is enabled
Next xmit serial <none>
Packetized sent/expedited: 45/5
Hello's sent/expedited: 481/2
Un/reliable mcasts: 0/0 Un/reliable ucasts: 46/55
Mcast exceptions: 0 CR packets: 0 ACKs suppressed: 2
Retransmissions sent: 0 Out-of-sequence rcvd: 0
Topology-ids on interface - 0
Authentication mode is not set
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 22
Part 6: Configure EIGRP Authentication
In Part 6, you will create an authentication key on all routers and configure router interfaces to use MD5 authentication for EIGRP message authentication.
Step 1: Configure authentication keys.
a. On R1, use the key chain name command in global configuration mode to create a key chain with the label EIGRP-KEYS.
R1(config)# key chain EIGRP-KEYS
R1(config-keychain)# key 1
R1(config-keychain-key)# key-string cisco
b. Complete the configuration on R2 and R3.
c. Issue the show key chain command. You should have the same output on every router.
Step 2: Configure EIGRP link authentication.
a. Apply the following commands to active EIGRP authentication on the serial interfaces on R1.
R1# conf t
R1(config)# interface s0/0/0
R1(config-if)# ip authentication key-chain eigrp 1 EIGRP-KEYS
R1(config-if)# ip authentication mode eigrp 1 md5
R1(config-if)# interface s0/0/1
R1(config-if)# ip authentication key-chain eigrp 1 EIGRP-KEYS
R1(config-if)# ip authentication mode eigrp 1 md5
b. Activate EIGRP authentication on the serial interfaces on R2 and R3.
c. On R2, use the show ip eigrp interfaces detail command to verify authentication.
R2# show ip eigrp interfaces detail
EIGRP-IPv4 Interfaces for AS(1)
Xmit Queue PeerQ Mean Pacing Time Multicast Pending
Interface Peers Un/Reliable Un/Reliable SRTT Un/Reliable Flow Timer Routes
Se0/0/0 1 0/0 0/0 1 0/23 50 0
Hello-interval is 60, Hold-time is 180
Split-horizon is enabled
Next xmit serial <none>
Packetized sent/expedited: 30/5
Hello's sent/expedited: 1163/5
Un/reliable mcasts: 0/0 Un/reliable ucasts: 25/34
Mcast exceptions: 0 CR packets: 0 ACKs suppressed: 0
Retransmissions sent: 0 Out-of-sequence rcvd: 0
Topology-ids on interface - 0
Authentication mode is md5, key-chain is "EIGRP-KEYS"
Se0/0/1 1 0/0 0/0 2 0/15 50 0
Hello-interval is 60, Hold-time is 180
Split-horizon is enabled
Next xmit serial <none>
Packetized sent/expedited: 31/1
Hello's sent/expedited: 1354/3
Un/reliable mcasts: 0/0 Un/reliable ucasts: 28/34
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 22
Mcast exceptions: 0 CR packets: 0 ACKs suppressed: 4
Retransmissions sent: 0 Out-of-sequence rcvd: 0
Topology-ids on interface - 0
Authentication mode is md5, key-chain is "EIGRP-KEYS"
Reflection
1. What are the benefits of summarizing routes?
_______________________________________________________________________________________
_______________________________________________________________________________________
Summarization can be used to limit the number of routing advertisements and the size of routing tables.
2. When setting EIGRP timers, why is it important to make the hold time value equal to or greater than the hello interval?
_______________________________________________________________________________________
_______________________________________________________________________________________
If the hold time is less than the hello interval, the neighbor adjacency will go down.
3. Why is it important to configure authentication for EIGRP?
_______________________________________________________________________________________
_______________________________________________________________________________________
Unauthenticated router updates create a security risk. Attackers could inject false route information into router updates to redirect traffic to create routing loops or to send traffic across unsecure links.
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 22
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Appendix A: Configuration Commands
Router R1
R1(config)# router eigrp 1
R1(config-router)# network 192.168.1.0
R1(config-router)# network 192.168.12.0 0.0.0.3
R1(config-router)# network 192.168.13.0 0.0.0.3
R1(config-router)# network 192.168.11.0 0.0.0.3
R1(config-router)# network 192.168.11.4 0.0.0.3
R1(config-router)# network 192.168.11.8 0.0.0.3
R1(config-router)# network 192.168.11.12 0.0.0.3
R1(config-router)# passive-interface g0/0
R1(config)# int s0/0/0
R1(config-if)# bandwidth 1024
R1(config-if)# int s0/0/1
R1(config-if)# bandwidth 64
Router R2
R2(config)# router eigrp 1
R2(config-router)# network 192.168.2.0
R2(config-router)# network 192.168.12.0 0.0.0.3
R2(config-router)# network 192.168.23.0 0.0.0.3
R2(config-router)# passive-interface g0/0
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 22
R2(config)# int s0/0/0
R2(config-if)# bandwidth 1024
Router R3
R3(config)# router eigrp 1
R3(config-router)# network 192.168.3.0
R3(config-router)# network 192.168.13.0 0.0.0.3
R3(config-router)# network 192.168.23.0 0.0.0.3
R3(config-router)# network 192.168.33.0 0.0.0.3
R3(config-router)# network 192.168.33.4 0.0.0.3
R3(config-router)# network 192.168.33.8 0.0.0.3
R3(config-router)# network 192.168.33.12 0.0.0.3
R3(config-router)# passive-interface g0/0
R3(config)# int s0/0/0
R3(config-if)# bandwidth 64
Device Configs - R1, R2, and R3
Router R1
R1#show run
Building configuration...
Current configuration : 2378 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
key chain EIGRP-KEYS
key 1
key-string cisco
!
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 22
!
redundancy
!
interface Loopback1
ip address 192.168.11.1 255.255.255.252
!
interface Loopback5
ip address 192.168.11.5 255.255.255.252
!
interface Loopback9
ip address 192.168.11.9 255.255.255.252
!
interface Loopback13
ip address 192.168.11.13 255.255.255.252
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 1024
ip address 192.168.12.1 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 75
ip hello-interval eigrp 1 60
ip hold-time eigrp 1 180
clock rate 2000000
!
interface Serial0/0/1
bandwidth 64
ip address 192.168.13.1 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 60
ip hold-time eigrp 1 180
!
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 22
router eigrp 1
network 192.168.1.0
network 192.168.11.0 0.0.0.3
network 192.168.11.4 0.0.0.3
network 192.168.11.8 0.0.0.3
network 192.168.11.12 0.0.0.3
network 192.168.12.0 0.0.0.3
network 192.168.13.0 0.0.0.3
auto-summary
passive-interface GigabitEthernet0/0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
Building configuration...
Current configuration : 2223 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 22
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
!
no ip domain lookup
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
key chain EIGRP-KEYS
key 1
key-string cisco
!
!
redundancy
!
interface Loopback1
ip address 192.168.22.1 255.255.255.252
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.2.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 1024
ip address 192.168.12.2 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 75
ip hello-interval eigrp 1 60
ip hold-time eigrp 1 180
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 22
!
interface Serial0/0/1
ip address 192.168.23.1 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip hello-interval eigrp 1 60
ip hold-time eigrp 1 180
clock rate 2000000
!
!
router eigrp 1
network 192.168.2.0
network 192.168.12.0 0.0.0.3
network 192.168.23.0 0.0.0.3
redistribute static
passive-interface GigabitEthernet0/0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Loopback1
!
!
!
!
control-plane
!
!
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 22
!
end
Router R3
R3#show run
Building configuration...
Current configuration : 2456 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
no ip domain lookup
ip cef
no ipv6 cef
!
key chain EIGRP-KEYS
key 1
key-string cisco
!
!
redundancy
!
interface Loopback1
ip address 192.168.33.1 255.255.255.252
!
interface Loopback5
ip address 192.168.33.5 255.255.255.252
!
interface Loopback9
ip address 192.168.33.9 255.255.255.252
!
interface Loopback13
ip address 192.168.33.13 255.255.255.252
!
interface Embedded-Service-Engine0/0
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 22
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 64
ip address 192.168.13.2 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 60
ip hold-time eigrp 1 180
ip summary-address eigrp 1 192.168.33.0 255.255.255.240
clock rate 2000000
!
interface Serial0/0/1
ip address 192.168.23.2 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip summary-address eigrp 1 192.168.33.0 255.255.255.240
ip hello-interval eigrp 1 60
ip hold-time eigrp 1 180
ip summary-address eigrp 1 192.168.33.0 255.255.255.240
!
!
router eigrp 1
network 192.168.3.0
network 192.168.13.0 0.0.0.3
network 192.168.23.0 0.0.0.3
network 192.168.33.0 0.0.0.3
network 192.168.33.4 0.0.0.3
network 192.168.33.8 0.0.0.3
network 192.168.33.12 0.0.0.3
passive-interface GigabitEthernet0/0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
Lab – Configuring Advanced EIGRP for IPv4 Features
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 22
!
control-plane
!
!
line con 0
password cisco
logging synchronous
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 27
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6 (Instructor
Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 27
Addressing Table
Device EIGRP
Router ID Interface IP Address Default Gateway
R1 1.1.1.1 G0/0
192.168.1.1/24
2001:DB8:ACAD:A::1/64
FE80::1 link-local
N/A
S0/0/0 (DCE)
192.168.12.1/30
2001:DB8:ACAD:12::1/64
FE80::1 link-local
N/A
S0/0/1
192.18.13.1/30
2001:DB8:ACAD:13::1/64
FE80::1 link-local
N/A
R2 2.2.2.2 G0/0
192.168.2.1/24
2001:DB8:ACAD:B::2/64
FE80::2 link-local
N/A
S0/0/0
192.168.12.2/30
2001:DB8:ACAD:12::2/64
FE80::2 link-local
N/A
S0/0/1 (DCE)
192.168.23.1/30
2001:DB8:ACAD:23::2/64
FE80::2 link-local
N/A
R3 3.3.3.3 G0/0
192.168.3.1/24
2001:DB8:ACAD:C::3/64
FE80::3 link-local
N/A
S0/0/0 (DCE)
192.168.13.2/30
2001:DB8:ACAD:13::3/64
FE80::3 link-local
N/A
S0/0/1
192.168.23.2/30
2001:DB8:ACAD:23::3/64
FE80::3 link-local
N/A
PC-A NIC 192.168.1.3/24
2001:DB8:ACAD:A::A/64
192.168.1.1
FE80::1
PC-B NIC 192.168.2.3/24
2001:DB8:ACAD:B::B/64
192.168.2.1
FE80::2
PC-C NIC 192.168.3.3/24
2001:DB8:ACAD:C::C/64
192.168.3.1
FE80::3
Objectives
Part 1: Build the Network and Load Device Configurations
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 27
Part 2: Troubleshoot Layer 3 Connectivity
Part 3: Troubleshoot EIGRP for IPv4
Part 4: Troubleshoot EIGRP for IPv6
Background / Scenario
The Enhanced Interior Gateway Routing Protocol (EIGRP) is an advanced distance vector routing protocol developed by Cisco Systems. EIGRP routers discover neighbors and establish and maintain adjacencies with neighbor routers using Hello packets. An EIGRP router assumes that as long as it is receiving Hello packets from a neighboring router, that neighbor is up and its routes remain viable.
EIGRP for IPv4 runs over the IPv4 network layer, communicating with other EIGRP IPv4 peers, and advertising only IPv4 routes. EIGRP for IPv6 has the same functionality as EIGRP for IPv4 but uses IPv6 as the network layer protocol, communicating with EIGRP for IPv6 peers and advertising IPv6 routes.
In this lab, you will troubleshoot a network that runs EIGRP for IPv4 and EIGRP for IPv6 routing protocols. This network is experiencing problems and you are tasked with finding the problems and correcting them.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Make sure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Router (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet and serial cables as shown in the topology
Part 1: Build the Network and Load Device Configurations
In Part 1, you will set up the network topology and configure basic settings on the PC hosts and routers.
Step 1: Cable the network as shown in the topology.
Step 2: Configure PC hosts.
Step 3: Load router configurations.
Load the following configurations into the appropriate router. All routers have the same passwords. The privileged EXEC password is class, and the console and vty password is cisco.
Router R1 Configuration:
conf t
service password-encryption
hostname R1
enable secret class
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 27
no ip domain lookup
ipv6 unicast-routing
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:A::1/64
ipv6 eigrp 1
no shutdown
interface Serial0/0/0
bandwidth 128
ip address 192.168.21.1 255.255.255.252
!ip address 192.168.12.1 255.255.255.252
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 eigrp 1
clock rate 128000
no shutdown
interface Serial0/0/1
!bandwidth 128
ip address 192.168.13.1 255.255.255.252
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:31::1/64
!ipv6 address 2001:DB8:ACAD:13::1/64
ipv6 eigrp 1
no shutdown
router eigrp 1
network 192.168.1.0
network 192.168.12.0 0.0.0.3
network 192.168.13.0 0.0.0.3
passive-interface GigabitEthernet0/0
eigrp router-id 1.1.1.1
ipv6 router eigrp 1
! router-id 1.1.1.1
!passive-interface GigabitEthernet0/0
no shutdown
banner motd @
Unauthorized Access is Prohibited! @
line con 0
password cisco
logging synchronous
line vty 0 4
password cisco
login
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 27
transport input all
end
Router R2 Configuration:
conf t
service password-encryption
hostname R2
enable secret class
no ip domain lookup
ipv6 unicast-routing
interface GigabitEthernet0/0
ip address 192.168.2.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:B::2/64
ipv6 eigrp 1
! no shutdown
interface Serial0/0/0
! bandwidth 128
ip address 192.168.12.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:12::2/64
ipv6 eigrp 1
no shutdown
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.1 255.255.255.0
!ip address 192.168.23.1 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
ipv6 eigrp 1
clock rate 128000
no shutdown
router eigrp 1
! network 192.168.2.0 0.0.0.255
network 192.168.12.0 0.0.0.3
network 192.168.23.0 0.0.0.3
passive-interface GigabitEthernet0/0
eigrp router-id 2.2.2.2
ipv6 router eigrp 1
! router-id 2.2.2.2
no shutdown
passive-interface GigabitEthernet0/0
banner motd @
Unauthorized Access is Prohibited! @
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 27
line con 0
password cisco
login
logging synchronous
line vty 0 4
password cisco
login
transport input all
end
Router R3 Configuration:
conf t
service password-encryption
hostname R3
enable secret class
no ip domain lookup
! ipv6 unicast-routing
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:C::3/64
ipv6 eigrp 1
! no shutdown
interface Serial0/0/0
! bandwidth 128
ip address 192.168.13.2 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:13::3/64
ipv6 eigrp 1
no shutdown
! clock rate 128000
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.2 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:23::3/64
ipv6 eigrp 1
no shutdown
router eigrp 1
network 192.168.3.0
network 192.168.13.0 0.0.0.3
! network 192.168.23.0 0.0.0.3
passive-interface GigabitEthernet0/0
eigrp router-id 3.3.3.3
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 27
!ipv6 router eigrp 1
! router-id 3.3.3.3
! passive-interface GigabitEthernet0/0
! no shutdown
banner motd @
Unauthorized Access is Prohibited! @
line con 0
password cisco
login
logging synchronous
line vty 0 4
password cisco
login
transport input all
end
Step 4: Save the running configuration for all routers.
Part 2: Troubleshoot Layer 3 Connectivity
In Part 2, you will verify that Layer 3 connectivity is established on all interfaces. You will need to test both IPv4 and IPv6 connectivity for all device interfaces.
Note: All serial interfaces should be set with a bandwidth of 128 Kb/s. The clock rate on the DCE interface should be set to 128000.
Step 1: Verify that the interfaces listed in the Addressing Table are active and configured with
correct IP address information.
a. Issue the show ip interface brief command on all routers to verify that the interfaces are in an up/up state. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1 - all interfaces are up/up R2 - G0/0 is administratively down R3 - G0/0 is administratively down
R1# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 192.168.1.1 YES manual up up
GigabitEthernet0/1 unassigned YES unset administratively down down
Serial0/0/0 192.168.21.1 YES manual up up
Serial0/0/1 192.168.13.1 YES manual up up
R2# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 27
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 192.168.2.1 YES manual administratively down down
GigabitEthernet0/1 unassigned YES unset administratively down down
Serial0/0/0 192.168.12.2 YES manual up up
Serial0/0/1 192.168.23.1 YES manual up up
R3# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Embedded-Service-Engine0/0 unassigned YES unset administratively down down
GigabitEthernet0/0 192.168.3.1 YES manual administratively down down
GigabitEthernet0/1 unassigned YES unset administratively down down
Serial0/0/0 192.168.13.2 YES manual up up
Serial0/0/1 192.168.23.2 YES manual up up
b. Issue the show run interface command to verify IP address assignments on all router interfaces. Compare the interface IP addresses against the Addressing Table and verify the subnet mask assignments. For IPv6, verify that the link-local address has been assigned. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1 – S0/0/0 incorrect IPv4 address should be 192.168.12.1, S0/0/1 incorrect IPv6 address should be 2001:DB8:ACAD:13::1/64
R2 – S0/0/1 incorrect subnet mask should be 255.255.255.252
R3 – all IPs configured correctly
R1# show run interface s0/0/0
Building configuration...
Current configuration : 188 bytes
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.21.1 255.255.255.252
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 eigrp 1
clock rate 128000
end
R1# show run interface s0/0/1
Building configuration...
Current configuration : 154 bytes
!
interface Serial0/0/1
ip address 192.168.13.1 255.255.255.252
ipv6 address FE80::1 link-local
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 27
ipv6 address 2001:DB8:ACAD:31::1/64
ipv6 eigrp 1
end
R2# show run interface s0/0/1
Building configuration...
Current configuration : 186 bytes
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.1 255.255.255.0
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
ipv6 eigrp 1
clock rate 128000
end
c. Issue the show interfaces interface-id command to verify bandwidth setting on the serial interfaces. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1 – S0/0/1 incorrect bandwidth of 1544 should be 128
R2 – S0/0/0 incorrect bandwidth of 1544 should be 128
R3 – S0/0/0 incorrect bandwidth of 1544 should be 128
R1# show interfaces s0/0/1
Serial0/0/1 is up, line protocol is up
Hardware is WIC MBRD Serial
Internet address is 192.168.13.1/30
MTU 1500 bytes, BW 1544 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation HDLC, loopback not set
Keepalive set (10 sec)
<output omitted>
R2# show interfaces s0/0/0
Serial0/0/0 is up, line protocol is up
Hardware is WIC MBRD Serial
Internet address is 192.168.12.2/30
MTU 1500 bytes, BW 1544 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation HDLC, loopback not set
Keepalive set (10 sec)
<output omitted>
R3# show interfaces s0/0/0
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 27
Serial0/0/0 is up, line protocol is up
Hardware is WIC MBRD Serial
Internet address is 192.168.13.2/30
MTU 1500 bytes, BW 1544 Kbit/sec, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation HDLC, loopback not set
Keepalive set (10 sec)
<output omitted>
d. Issue the show controllers interface-id command to verify that clock rates have been set to 128 Kb/s on all DCE serial interfaces. Issue the show interfaces interface-id command to verify bandwidth setting on the serial interfaces. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1 – clock rate correctly configured on S0/0/0
R2 – clock rate correctly configured on S0/0/1
R3 – clock rate incorrectly configured 2000000 on S0/0/0 should be 128000
R3# show controllers s0/0/0
Interface Serial0/0/0
Hardware is SCC
DCE V.35, clock rate 2000000
idb at 0x30FE4FB4, driver data structure at 0x29E7C30C
wic_info 0x30FE5EC4
<output omitted>
e. Resolve all problems found. Record the commands used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# interface s0/0/0
R1(config-if)# ip address 192.168.12.1 255.255.255.252
R1(config-if)# interface s0/0/1
R1(config-if)# bandwidth 128
R1(config-if)# no ipv6 address 2001:db8:acad:31::1/64
R1(config-if)# ipv6 address 2001:db8:acad:13::1/64
R1(config-if)# end
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 27
R2(config)# interface g0/0
R2(config-if)# no shutdown
R2(config-if)# interface s0/0/0
R2(config-if)# bandwidth 128
R2(config-if)# interface s0/0/1
R2(config-if)# ip address 192.168.23.1 255.255.255.252
R2(config-if)# end
R3(config)# interface g0/0
R3(config-if)# no shutdown
R3(config-if)# interface s0/0/0
R3(config-if)# bandwidth 128
R3(config-if)# clock rate 128000
R3(config-if)# end
Step 2: Verify Layer 3 connectivity.
Use the ping command and verify that each router has network connectivity with the serial interfaces on the neighbor routers. Verify that the PCs can ping their default gateways. If problems still exist, continue troubleshooting Layer 3 issues.
Part 3: Troubleshoot EIGRP for IPv4
In Part 3, you will troubleshoot EIGRP for IPv4 problems and make the necessary changes needed to establish EIGRP for IPv4 routes and end-to-end IPv4 connectivity.
Note: LAN (G0/0) interfaces should not advertise EIGRP routing information, but routes to these networks should be contained in the routing tables.
Step 1: Test IPv4 end-to-end connectivity.
From each PC host, ping the other PC hosts in the topology to verify end-to-end connectivity.
Note: It may be necessary to disable the PC firewall before testing, to ping between PCs.
a. Ping from PC-A to PC-B. Were the pings successful? _____________ No
b. Ping from PC-A to PC-C. Were the pings successful? _____________ Yes
c. Ping from PC-B to PC-C. Were the pings successful? _____________ No
Step 2: Verify that all interfaces are assigned to EIGRP for IPv4.
a. Issue the show ip protocols command to verify that EIGRP is running and that all networks are advertised. This command also allows you to verify that the router ID is set correctly, and that the LAN interfaces are set as passive interfaces. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1 – router ID, advertised networks, and passive interface are all configure correctly
R2 – router ID is correct, network statement missing for 192.168.2.0 and g0/0 not set to passive
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 27
R3 – router ID and passive interface are configured correctly, network statement missing for 192.168.23.0
R1# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "eigrp 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP-IPv4 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 1.1.1.1
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 4
Maximum hopcount 100
Maximum metric variance 1
Automatic Summarization: disabled
Maximum path: 4
Routing for Networks:
192.168.1.0
192.168.12.0/30
192.168.13.0/30
Passive Interface(s):
GigabitEthernet0/0
Routing Information Sources:
Gateway Distance Last Update
192.168.12.2 90 00:19:19
192.168.13.2 90 00:19:20
Distance: internal 90 external 170
R2# show ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "eigrp 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP-IPv4 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 2.2.2.2
Topology : 0 (base)
Active Timer: 3 min
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 27
Distance: internal 90 external 170
Maximum path: 4
Maximum hopcount 100
Maximum metric variance 1
Automatic Summarization: disabled
Maximum path: 4
Routing for Networks:
192.168.12.0/30
192.168.23.0/30
Routing Information Sources:
Gateway Distance Last Update
192.168.12.1 90 00:13:23
Distance: internal 90 external 170
R3# sh ip protocols
*** IP Routing is NSF aware ***
Routing Protocol is "eigrp 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP-IPv4 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 3.3.3.3
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 4
Maximum hopcount 100
Maximum metric variance 1
Automatic Summarization: disabled
Maximum path: 4
Routing for Networks:
192.168.3.0
192.168.13.0/30
Passive Interface(s):
GigabitEthernet0/0
Routing Information Sources:
Gateway Distance Last Update
192.168.13.1 90 00:14:25
Distance: internal 90 external 170
b. Make the necessary changes based on the output from the show ip protocols command. Record the commands that were used to correct the issues.
____________________________________________________________________________________
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 27
____________________________________________________________________________________
____________________________________________________________________________________
R2(config)# router eigrp 1
R2(config-router)# network 192.168.2.0 0.0.0.255
R2(config-router)# passive-interface g0/0
R2(config-router)# end
R3(config)# router eigrp 1
R3(config-router)# network 192.168.23.0 0.0.0.3
R3(config-router)# end
c. Re-issue the show ip protocols command to verify that your changes had the desired effect.
Step 3: Verify EIGRP neighbor information.
a. Issue the show ip eigrp neighbor command to verify that EIGRP adjacencies have been established between the neighboring routers.
R1# show ip eigrp neighbor
EIGRP-IPv4 Neighbors for AS(1)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 192.168.12.2 Se0/0/0 10 00:27:21 5 1170 0 12
0 192.168.13.2 Se0/0/1 12 00:47:18 1 1140 0 13
R2# show ip eigrp neighbor
EIGRP-IPv4 Neighbors for AS(1)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 192.168.23.2 Se0/0/1 10 00:06:54 18 1170 0 14
0 192.168.12.1 Se0/0/0 11 00:30:35 6 1200 0 20
R3# show ip eigrp neighbor
EIGRP-IPv4 Neighbors for AS(1)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 192.168.23.1 Se0/0/1 14 00:07:23 16 1170 0 13
0 192.168.13.1 Se0/0/0 13 00:51:01 2 1140 0 21
b. Resolve any outstanding problems that were discovered.
Instructor Note: All problems were resolved in Step 2b.
Step 4: Verify EIGRP for IPv4 routing information.
a. Issue the show ip route eigrp command to verify that each router has EIGRP for IPv4 routes to all non-adjoining networks.
R1# show ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 27
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
D 192.168.2.0/24 [90/20514560] via 192.168.12.2, 01:04:13, Serial0/0/0
D 192.168.3.0/24 [90/20514560] via 192.168.13.2, 01:04:13, Serial0/0/1
192.168.23.0/30 is subnetted, 1 subnets
D 192.168.23.0 [90/21024000] via 192.168.13.2, 01:04:14, Serial0/0/1
[90/21024000] via 192.168.12.2, 01:04:14, Serial0/0/0
R2# show ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
D 192.168.1.0/24 [90/20514560] via 192.168.12.1, 01:04:42, Serial0/0/0
D 192.168.3.0/24 [90/20514560] via 192.168.23.2, 01:04:42, Serial0/0/1
192.168.13.0/30 is subnetted, 1 subnets
D 192.168.13.0 [90/21024000] via 192.168.23.2, 01:04:42, Serial0/0/1
[90/21024000] via 192.168.12.1, 01:04:42, Serial0/0/0
R3# show ip route eigrp
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
D 192.168.1.0/24 [90/20514560] via 192.168.13.1, 01:05:07, Serial0/0/0
D 192.168.2.0/24 [90/20514560] via 192.168.23.1, 01:05:07, Serial0/0/1
192.168.12.0/30 is subnetted, 1 subnets
D 192.168.12.0 [90/21024000] via 192.168.23.1, 01:05:07, Serial0/0/1
[90/21024000] via 192.168.13.1, 01:05:07, Serial0/0/0
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 27
Are all EIGRP routes available? ________ yes
If any EIGRP for IPv4 routes are missing, what is missing?
____________________________________________________________________________________
All EIGRP routes are present.
b. If any routing information is missing, resolve these issues.
Instructor Note: All problems should have been resolved.
Step 5: Verify IPv4 end-to-end connectivity.
From each PC, verify that IPv4 end-to-end connectivity exists. PCs should be able to ping the other PC hosts in the topology. If IPv4 end-to-end connectivity does not exist, then continue troubleshooting to resolve remaining issues.
Note: It may be necessary to disable the PCs firewall.
Part 4: Troubleshoot EIGRP for IPv6
In Part 3, you will troubleshoot EIGRP for IPv6 problems and make the necessary changes needed to establish EIGRP for IPv6 routes and end-to-end IPv6 connectivity.
Note: LAN (G0/0) interfaces should not advertise EIGRP routing information, but routes to these networks should be contained in the routing tables.
Step 1: Test IPv6 end-to-end connectivity.
From each PC host, ping the IPv6 addresses of the other PC hosts in the topology to verify end-to-end connectivity.
Step 2: Verify that IPv6 unicast routing has been enabled on all routers.
a. An easy way to verify that IPv6 routing has been enabled on a router is to use the show run | section ipv6 unicast command. By adding this pipe to the show run command, the ipv6 unicast-routing command is displayed if IPv6 routing has been enabled.
Note: The show run command can also be issued without any pipe, and then a manual search for the ipv6 unicast-routing command can be done.
Issue the command on each router. Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R3 does not have IPv6 unicast routing enabled.
b. If IPv6 unicast routing is not enabled on one or more routers, enable it now. Record the commands that were used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
R3(config)# ipv6 unicast-routing
Step 3: Verify that all interfaces are assigned to EIGRP for IPv6.
a. Issue the show ipv6 protocols command and verify that the router ID is correct. This command also allows you to verify that the LAN interfaces are set as passive interfaces.
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 27
Note: If no output is generated from this command, then the EIGRP for IPv6 process has not been configured.
Record your findings.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1 – router ID is incorrect.and g0/0 not set to passive interface
R2 – router ID is incorrect
R3 – EIGRP had not been configured on this router
R1# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "eigrp 1"
EIGRP-IPv6 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 192.168.21.1
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 16
Maximum hopcount 100
Maximum metric variance 1
Interfaces:
Serial0/0/0
Serial0/0/1
GigabitEthernet0/0
Redistribution:
None
R2# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
IPv6 Routing Protocol is "eigrp 1"
EIGRP-IPv6 Protocol for AS(1)
Metric weight K1=1, K2=0, K3=1, K4=0, K5=0
NSF-aware route hold timer is 240
Router-ID: 192.168.23.1
Topology : 0 (base)
Active Timer: 3 min
Distance: internal 90 external 170
Maximum path: 16
Maximum hopcount 100
Maximum metric variance 1
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 27
Interfaces:
Serial0/0/0
Serial0/0/1
GigabitEthernet0/0 (passive)
Redistribution:
None
R3# show ipv6 protocols
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "ND"
b. Make the necessary configuration changes. Record the commands used to correct the issues.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
R1(config)# ipv6 router eigrp 1
R1(config-rtr)# router-id 1.1.1.1
R1(config-rtr)# passive-interface g0/0
R2(config-rtr)# end
R2(config)# ipv6 router eigrp 1
R2(config-rtr)# router-id 2.2.2.2
R2(config-rtr)# end
R3(config)# ipv6 router eigrp 1
R3(config-rtr)# router-id 3.3.3.3
R3(config-rtr)# passive-interface g0/0
R3(config-rtr)# no shutdown
R3(config-rtr)# interface g0/0
R3(config-if)# ipv6 eigrp 1
R3(config-if)# interface s0/0/0
R3(config-if)# ipv6 eigrp 1
R3(config-if)# interface s0/0/1
R3(config-if)# ipv6 eigrp 1
R3(config-if)# end
c. Re-issue the show ipv6 protocols command to verify that your changes are correct.
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 27
Step 4: Verify that all routers have correct neighbor adjacency information.
a. Issue the show ipv6 eigrp neighbor command to verify that adjacencies have formed between neighboring routers.
R1# show ipv6 eigrp neighbors
EIGRP-IPv6 Neighbors for AS(1)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 Link-local address: Se0/0/1 13 00:13:38 17 1182 0 7
FE80::3
0 Link-local address: Se0/0/0 14 00:17:30 16 1182 0 20
FE80::2
R2# show ipv6 eigrp neighbors
EIGRP-IPv6 Neighbors for AS(1)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 Link-local address: Se0/0/1 13 00:14:36 27 1182 0 8
FE80::3
0 Link-local address: Se0/0/0 12 00:18:33 17 1182 0 22
FE80::1
R3# show ipv6 eigrp neighbors
EIGRP-IPv6 Neighbors for AS(1)
H Address Interface Hold Uptime SRTT RTO Q Seq
(sec) (ms) Cnt Num
1 Link-local address: Se0/0/1 12 00:07:39 24 1182 0 21
FE80::2
0 Link-local address: Se0/0/0 12 00:07:44 19 1182 0 21
FE80::1
b. Resolve any EIGRP adjacency issues that still exist.
Instructor Note: All adjacency issues should have been resolved in earlier steps.
Step 5: Verify EIGRP for IPv6 routing information.
a. Issue the show ipv6 route eigrp command, and verify that EIGRP for IPv6 routes exist to all non-adjoining networks.
R1# show ipv6 route eigrp
IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
D 2001:DB8:ACAD:B::/64 [90/20514560]
via FE80::2, Serial0/0/0
D 2001:DB8:ACAD:C::/64 [90/20514560]
via FE80::3, Serial0/0/1
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 27
D 2001:DB8:ACAD:23::/64 [90/21024000]
via FE80::2, Serial0/0/0
via FE80::3, Serial0/0/1
R2# show ipv6 route eigrp
IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
D 2001:DB8:ACAD:A::/64 [90/20514560]
via FE80::1, Serial0/0/0
D 2001:DB8:ACAD:C::/64 [90/20514560]
via FE80::3, Serial0/0/1
D 2001:DB8:ACAD:13::/64 [90/21024000]
via FE80::1, Serial0/0/0
via FE80::3, Serial0/0/1
R3# show ipv6 route eigrp
IPv6 Routing Table - default - 10 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, I1 - ISIS L1, I2 - ISIS L2
IA - ISIS interarea, IS - ISIS summary, D - EIGRP, EX - EIGRP external
ND - ND Default, NDp - ND Prefix, DCE - Destination, NDr - Redirect
O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
D 2001:DB8:ACAD:A::/64 [90/20514560]
via FE80::1, Serial0/0/0
D 2001:DB8:ACAD:B::/64 [90/20514560]
via FE80::2, Serial0/0/1
D 2001:DB8:ACAD:12::/64 [90/21024000]
via FE80::1, Serial0/0/0
via FE80::2, Serial0/0/1
Are all EIGRP routes available? ________ yes
If any EIGRP for IPv6 routes are missing, what is missing?
____________________________________________________________________________________
All EIGRP for IPv6 routes are present.
b. Resolve any routing issues that still exist.
Instructor Note: All EIGRP for IPv6 routes issues should have been resolved.
Step 6: Test IPv6 end-to-end connectivity.
From each PC, verify that IPv6 end-to-end connectivity exists. PCs should be able to ping the other PC hosts in the topology. If IPv6 end-to-end connectivity does not exist, then continue troubleshooting to resolve remaining issues.
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 27
Note: It may be necessary to disable the PCs firewall.
Reflection
Why would you troubleshoot EIGRP for IPv4 and EIGRP for IPv6 separately?
_______________________________________________________________________________________
EIGRP for IPv4 and EIGRP for IPv6 do not share routing information and their configuration is completely independent. Troubleshooting these two protocols should be done independently.
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs - Final
Router R1
R1#show run
Building configuration...
Current configuration : 1937 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R1
!
boot-start-marker
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 27
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:A::1/64
ipv6 eigrp 1
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.1 255.255.255.252
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:12::1/64
ipv6 eigrp 1
clock rate 128000
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.13.1 255.255.255.252
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:ACAD:13::1/64
ipv6 eigrp 1
!
router eigrp 1
network 192.168.1.0
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 23 of 27
network 192.168.12.0 0.0.0.3
network 192.168.13.0 0.0.0.3
passive-interface GigabitEthernet0/0
eigrp router-id 1.1.1.1
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ipv6 router eigrp 1
passive-interface GigabitEthernet0/0
eigrp router-id 1.1.1.1
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited! ^C
!
line con 0
password 7 13061E010803
login
logging synchronous
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 060506324F41
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2
R2# show run
Building configuration...
Current configuration : 1937 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 27
service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.2.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:B::2/64
ipv6 eigrp 1
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.12.2 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:12::2/64
ipv6 eigrp 1
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.1 255.255.255.252
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:ACAD:23::2/64
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 25 of 27
ipv6 eigrp 1
clock rate 128000
!
router eigrp 1
network 192.168.2.0
network 192.168.12.0 0.0.0.3
network 192.168.23.0 0.0.0.3
passive-interface GigabitEthernet0/0
eigrp router-id 2.2.2.2
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ipv6 router eigrp 1
passive-interface GigabitEthernet0/0
eigrp router-id 2.2.2.2
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited! ^C
!
line con 0
password 7 13061E010803
login
logging synchronous
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 070C285F4D06
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R3
R3# show run
Building configuration...
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 26 of 27
Current configuration : 1976 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
ipv6 unicast-routing
ipv6 cef
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:C::3/64
ipv6 eigrp 1
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
bandwidth 128
ip address 192.168.13.2 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:13::3/64
ipv6 eigrp 1
clock rate 128000
Lab – Troubleshooting Basic EIGRP for IPv4 and IPv6
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 27 of 27
!
interface Serial0/0/1
bandwidth 128
ip address 192.168.23.2 255.255.255.252
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:ACAD:23::3/64
ipv6 eigrp 1
!
router eigrp 1
network 192.168.3.0
network 192.168.13.0 0.0.0.3
network 192.168.23.0 0.0.0.3
passive-interface GigabitEthernet0/0
eigrp router-id 3.3.3.3
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ipv6 router eigrp 1
passive-interface GigabitEthernet0/0
eigrp router-id 3.3.3.3
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited! ^C
!
line con 0
password 7 13061E010803
login
logging synchronous
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 13061E010803
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 18
Lab – Troubleshooting Advanced EIGRP (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Topology
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 18
Addressing Table
Device Interface IP Address Subnet Mask Default Gateway
R1 G0/0 192.168.1.1 255.255.255.0 N/A
Lo1 172.16.11.1 255.255.255.0 N/A
Lo2 172.16.12.1 255.255.255.0 N/A
Lo3 172.16.13.1 255.255.255.0 N/A
Lo4 172.16.14.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.12.1 255.255.255.252 N/A
S0/0/1 192.168.13.1 255.255.255.252 N/A
R2 G0/0 192.168.2.1 255.255.255.0 N/A
Lo0 209.165.200.225 255.255.255.252 N/A
S0/0/0 192.168.12.2 255.255.255.252 N/A
S0/0/1 (DCE) 192.168.23.1 255.255.255.252 N/A
R3 G0/0 192.168.3.1 255.255.255.0 N/A
Lo3 172.16.33.1 255.255.255.0 N/A
Lo4 172.16.34.1 255.255.255.0 N/A
Lo5 172.16.35.1 255.255.255.0 N/A
Lo6 172.16.36.1 255.255.255.0 N/A
S0/0/0 (DCE) 192.168.13.2 255.255.255.252 N/A
S0/0/1 192.168.23.2 255.255.255.252 N/A
PC-A NIC 192.168.1.3 255.255.255.0 192.168.1.1
PC-B NIC 192.168.2.3 255.255.255.0 192.168.2.1
PC-C NIC 192.168.3.3 255.255.255.0 192.168.3.1
Objectives
Part 1: Build the Network and Load Device Configurations
Part 2: Troubleshoot EIGRP
Background / Scenario
The Enhanced Interior Gateway Routing Protocol (EIGRP) has advanced features to allow changes related to summarization, default route propagation, bandwidth utilization, metrics, and security.
In this lab, you will troubleshoot a network that is running EIGRP. Advanced EIGRP features have been implemented, but the network is now experiencing problems. You are tasked with finding and correcting the network issues.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with Cisco IOS, Release 15.2(4)M3 (universalk9 image). Other routers and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 18
from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the correct interface identifiers.
Note: Ensure that the routers have been erased and have no startup configurations. If you are unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet cables as shown in the topology
Part 1: Build the Network and Load Device Configurations
Step 1: Cable the network as shown in the topology.
Step 2: Configure PC hosts.
Step 3: Load router configurations.
Load the following configurations into the appropriate router. All routers have the same passwords. The privileged EXEC password is class, and cisco is the console and vty password.
Router R1 Configuration:
conf t
hostname R1
enable secret class
no ip domain lookup
key chain EIGRP-KEYS
key 1
key-string cisco123
! key-string Cisco123
line con 0
password cisco
login
logging synchronous
line vty 0 4
password cisco
login
banner motd @
Unauthorized Access is Prohibited! @
interface lo1
description Connection to Branch 11
ip add 172.16.11.1 255.255.255.0
interface lo2
description Connection to Branch 12
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 18
ip add 172.16.12.1 255.255.255.0
interface lo3
description Connection to Branch 13
ip add 172.16.13.1 255.255.255.0
interface lo4
description Connection to Branch 14
ip add 172.16.14.1 255.255.255.0
interface g0/0
description R1 LAN Connection
ip add 192.168.1.1 255.255.255.0
no shutdown
interface s0/0/0
description Serial Link to R2
clock rate 128000
! bandwidth 128
ip add 192.168.12.1 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
ip bandwidth-percent eigrp 1 40
! ip summary-address eigrp 1 172.16.8.0 255.255.248.0
no shutdown
interface s0/0/1
description Serial Link to R3
bandwidth 128
ip add 192.168.13.1 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
! ip hello-interval eigrp 1 30
! ip hold-time eigrp 1 90
! ip summary-address eigrp 1 172.16.8.0 255.255.248.0
no shutdown
router eigrp 1
router-id 1.1.1.1
network 192.168.1.0 0.0.0.255
network 192.168.12.0 0.0.0.3
network 192.168.13.0 0.0.0.3
network 172.16.0.0 0.0.255.255
passive-interface g0/0
auto-summary
! no auto-summary
end
Router R2 Configuration:
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 18
conf t
hostname R2
enable secret class
no ip domain lookup
key chain EIGRP-KEYS
key 1
key-string Cisco123
line con 0
password cisco
login
logging synchronous
line vty 0 4
password cisco
login
banner motd @
Unauthorized Access is Prohibited! @
interface g0/0
description R2 LAN Connection
ip add 192.168.2.1 255.255.255.0
no shutdown
interface s0/0/0
description Serial Link to R1
bandwidth 128
ip add 192.168.12.2 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
no shutdown
interface s0/0/1
description Serial Link to R3
bandwidth 128
! clock rate 128000
ip add 192.168.23.1 255.255.255.252
ip authentication mode eigrp 1 md5
! ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
no shutdown
interface lo0
ip add 209.165.200.225 255.255.255.252
description Connection to ISP
router eigrp 1
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 18
router-id 2.2.2.2
network 192.168.2.0 0.0.0.255
network 192.168.12.0 0.0.0.3
network 192.168.23.0 0.0.0.3
passive-interface g0/0
! redistribute static
ip route 0.0.0.0 0.0.0.0 lo0
end
Router R3 Configuration:
conf t
hostname R3
enable secret class
no ip domain lookup
key chain EIGRP-KEYS
key 1
key-string Cisco123
line con 0
password cisco
login
logging synchronous
line vty 0 4
password cisco
login
banner motd @
Unauthorized Access is Prohibited! @
interface lo3
description Connection to Branch 33
ip add 172.16.33.1 255.255.255.0
interface lo4
description Connection to Branch 34
ip add 172.16.34.1 255.255.255.0
interface lo5
description Connection to Branch 35
ip add 172.16.35.1 255.255.255.0
interface lo6
description Connection to Branch 36
ip add 172.16.36.1 255.255.255.0
interface g0/0
description R3 LAN Connection
ip add 192.168.3.1 255.255.255.0
no shutdown
interface s0/0/0
description Serial Link to R1
ip add 192.168.13.2 255.255.255.252
ip authentication mode eigrp 1 md5
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 18
ip authentication key-chain eigrp 1 EIGRP-KEYS
! ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
! ip summary-address eigrp 1 172.16.32.0 255.255.248.0
clock rate 128000
bandwidth 128
no shutdown
interface s0/0/1
description Serial Link to R2
bandwidth 128
ip add 192.168.23.2 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 eigrp-keys
! ip authentication key-chain eigrp 1 EIGRP-KEYS
! ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
! ip summary-address eigrp 1 172.16.32.0 255.255.248.0
no shutdown
router eigrp 1
router-id 3.3.3.3
network 192.168.3.0 0.0.0.255
network 192.168.13.0 0.0.0.3
network 192.168.23.0 0.0.0.3
network 172.16.0.0 0.0.255.255
passive-interface g0/0
auto-summary
! no auto-summary
end
Step 4: Verify end-to-end connectivity.
Note: It may be necessary to disable the PC firewall to ping between PCs.
Step 5: Save the configuration on all routers.
Part 2: Troubleshoot EIGRP
In Part 2, verify that all routers have established neighbor adjacencies, and that all network routes are available.
Additional EIGRP Requirements:
All serial interface clock rates should be set at 128 Kb/s and a matching bandwidth setting should be
available to allow EIGRP cost metrics to be calculated correctly.
Manual route summarization of the branch networks, simulated by using Loopback interfaces on R1 and
R3, should be utilized. The automatic summarization feature of EIGRP should not be used.
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 18
EIGRP should redistribute the static default route to the Internet. This is simulated by using Loopback
interface 0 on R2.
EIGRP should be configured to use no more than 40 percent of the available bandwidth on the serial
interfaces.
EIGRP Hello/Hold timer intervals should be set to 30/90 on all serial interfaces.
All serial interfaces should be configured with MD5 authentication, using key chain EIGRP-KEYS, with a
key-string of Cisco123.
List the commands used during your EIGRP troubleshooting process:
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Answers may vary, but the list of commands can include:
show controllers,
show ip eigrp neighbor
show ip eigrp interfaces
show ip eigrp interface detail
show ip route
show ip route eigrp
show ip protocols
show run
show run | section router eigrp
List the changes made to resolve the EIGRP issues. If no problems were found on the device, then respond with “no problems were found”.
R1 Router:
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
R1(config)# key chain EIGRP-KEYS
R1(config-keychain)# key 1
R1(config-keychain-key)# key-string Cisco123
R1(config-keychain-key)# interface s0/0/0
R1(config-if)# bandwidth 128
R1(config-if)# ip summary-address eigrp 1 172.16.8.0 255.255.248.0
R1(config-if)# interface s0/0/1
R1(config-if)# ip hello-interval eigrp 1 30
R1(config-if)# ip hold-time eigrp 1 90
R1(config-if)# ip summary-address eigrp 1 172.16.8.0 255.255.248.0
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 18
R1(config-if)# router eigrp 1
R1(config-router)# no auto-summary
R2 Router:
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
R2(config)# interface s0/0/1
R2(config-if)# clock rate 128000
R2(config-if)# ip authentication key-chain eigrp 1 EIGRP-KEYS
R2(config-if)# router eigrp 1
R2(config-router)# redistribute static
R3 Router:
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
R3(config)# interface s0/0/0
R3(config-if)# ip summary-address eigrp 1 172.16.32.0 255.255.248.0
R3(config-if)# ip bandwidth-percent eigrp 1 40
R3(config-if)# interface s0/0/1
R3(config-if)# ip authentication key-chain eigrp 1 EIGRP-KEYS
R3(config-if)# ip summary-address eigrp 1 172.16.32.0 255.255.248.0
R3(config-if)# ip bandwidth-percent eigrp 1 40
R3(config-if)# router eigrp 1
R3(config-router)# no auto-summary
Reflection
1. How can the auto-summary command create routing issues in EIGRP?
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
_______________________________________________________________________________________
Answers may vary, but auto summary may create routing issues by summarizing subnets in a network as a classful route. This may cause traffic to be incorrectly routed. When working with the EIGRP routing protocol, it is often preferable to manually summarize routes in EIGRP instead of allowing them to be automatically summarized. This is why Cisco changed the default setting in IOS 15 to no auto-summary.
2. What advantages are provided by manually summarizing the branch routes (loopback interfaces on R1 and R3) in this network?
_______________________________________________________________________________________
_______________________________________________________________________________________
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 18
Answers may vary, but manual summarization of these networks reduces the number of routes contained in the routing tables and reduces EIGRP traffic by eliminating unnecessary updates of each branch route.
3. Why would you want to change the EIGRP Hello and Hold time intervals on an interface?
_______________________________________________________________________________________
_______________________________________________________________________________________
You may want to extend the time between EIGRP hellos on an interface with a low bandwidth clocking speed. This reduces the amount of EIGRP traffic over that interface, providing more availability for data traffic.
Router Interface Summary Table
Router Interface Summary
Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2
1800 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
1900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2801 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/1/1)
2811 Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
2900 Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs
Router R1 (Final)
R1#sh run
Building configuration...
Current configuration : 2626 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 18
boot-start-marker
boot-end-marker
!
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
!
key chain EIGRP-KEYS
key 1
key-string Cisco123
!
interface Loopback1
description Connection to Branch 11
ip address 172.16.11.1 255.255.255.0
!
interface Loopback2
description Connection to Branch 12
ip address 172.16.12.1 255.255.255.0
!
interface Loopback3
description Connection to Branch 13
ip address 172.16.13.1 255.255.255.0
!
interface Loopback4
description Connection to Branch 14
ip address 172.16.14.1 255.255.255.0
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description R1 LAN Connection
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 18
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
description Serial Link to R2
bandwidth 128
ip address 192.168.12.1 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
ip summary-address eigrp 1 172.16.8.0 255.255.248.0
clock rate 128000
!
interface Serial0/0/1
description Serial Link to R3
bandwidth 128
ip address 192.168.13.1 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
ip summary-address eigrp 1 172.16.8.0 255.255.248.0
!
!
router eigrp 1
network 172.16.0.0
network 192.168.1.0
network 192.168.12.0 0.0.0.3
network 192.168.13.0 0.0.0.3
passive-interface GigabitEthernet0/0
eigrp router-id 1.1.1.1
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 18
!
banner motd ^C
Unauthorized Access is Prohibited! ^C
!
line con 0
password cisco
login
logging synchronous
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
Router R2 (Final)
R2#sh run
Building configuration...
Current configuration : 2220 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 18
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
key chain EIGRP-KEYS
key 1
key-string Cisco123
!
interface Loopback0
description Connection to ISP
ip address 209.165.200.225 255.255.255.252
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description R2 LAN Connection
ip address 192.168.2.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
description Serial Link to R1
bandwidth 128
ip address 192.168.12.2 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
!
interface Serial0/0/1
description Serial Link to R3
bandwidth 128
ip address 192.168.23.1 255.255.255.252
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 18
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
clock rate 128000
!
!
router eigrp 1
network 192.168.2.0
network 192.168.12.0 0.0.0.3
network 192.168.23.0 0.0.0.3
redistribute static
passive-interface GigabitEthernet0/0
eigrp router-id 2.2.2.2
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Loopback0
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited! ^C
!
line con 0
password cisco
login
logging synchronous
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 18
scheduler allocate 20000 1000
!
end
Router R3 (Final)
R3#sh run
Building configuration...
Current configuration : 2551 bytes
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
multilink bundle-name authenticated
!
key chain EIGRP-KEYS
key 1
key-string Cisco123
!
interface Loopback3
description Connection to Branch 33
ip address 172.16.33.1 255.255.255.0
!
interface Loopback4
description Connection to Branch 34
ip address 172.16.34.1 255.255.255.0
!
interface Loopback5
description Connection to Branch 35
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 18
ip address 172.16.35.1 255.255.255.0
!
interface Loopback6
description Connection to Branch 36
ip address 172.16.36.1 255.255.255.0
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
description R3 LAN Connection
ip address 192.168.3.1 255.255.255.0
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
description Serial Link to R1
bandwidth 128
ip address 192.168.13.2 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
ip summary-address eigrp 1 172.16.32.0 255.255.248.0
clock rate 128000
!
interface Serial0/0/1
description Serial Link to R2
bandwidth 128
ip address 192.168.23.2 255.255.255.252
ip authentication mode eigrp 1 md5
ip authentication key-chain eigrp 1 EIGRP-KEYS
ip bandwidth-percent eigrp 1 40
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
ip summary-address eigrp 1 172.16.32.0 255.255.248.0
!
Lab – Troubleshooting Advanced EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 18
router eigrp 1
network 172.16.0.0
network 192.168.3.0
network 192.168.13.0 0.0.0.3
network 192.168.23.0 0.0.0.3
passive-interface GigabitEthernet0/0
eigrp router-id 3.3.3.3
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C
Unauthorized Access is Prohibited! ^C
!
line con 0
password cisco
login
logging synchronous
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password cisco
login
transport input all
!
scheduler allocate 20000 1000
!
end
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 6
Tweaking EIGRP (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
Implement advanced EIGRP features to enhance operation in a small- to medium-sized business network.
This chapter will focus on some advanced methods to fine tune EIGRP network configurations. This modeling activity will prove your mastery of some of these concepts. The purpose of this activity is to review EIGRP routing protocol fine-tuning concepts.
Scenario
The purpose of this activity is to review EIGRP routing protocol fine-tuning concepts.
You will work with a partner to design one EIGRP topology. This topology will be the basis for two parts of the activity. The first will use default settings for all configurations and the second will incorporate, at least, three of the following fine-tuning EIGRP options:
Manual summary route
Default routes
Default routes propagation
Hello interval timer settings
Refer to the labs, Packet Tracer activities, and interactive activities to help you as you progress through this modeling activity.
Directions are listed on the PDF file for this activity. Share your completed work with another group. You may wish to save a copy of this activity to a portfolio.
Resources
Packet Tracer software or real network lab equipment
Word processing program
Directions
Step 1: Design a WAN and LAN topology.
a. Use Packet Tracer to design a network with two routers (1941 model, suggested). If necessary, add NICs to the routers to provide connectivity to the routers to provide for, at least, two LANs for each router. Add, at least, one PC to each LAN.
b. Address the networks using either an IPv4 or IPv6 addressing scheme. VLSM may or may not be used per group discretion. If you use a full VLSM-addressed network, you will need to turn off auto-summarization from the beginning of your configuration design.
c. Configure the topology using basic EIGRP default settings.
d. Make sure all PCs can ping each other to prove connectivity. If not, work to make this so.
e. Save your work.
Step 2: Copy the topology.
a. Using your cursor, highlight the entire EIGRP-configured topology.
Tweaking EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 6
b. Press Ctrl+C to copy the highlighted topology.
c. Use Ctrl+V to paste a full copy of the topology to the Packet Tracer desktop. You will now have displayed two exact EIGRP-configured topologies. You will use the topology copy to tweak the network.
d. While highlighted, move the copied topology to a different location on the Packet Tracer desktop to create room between the two for configuration purposes.
Step 3: Configure fine-tuning features on the copied topology.
a. Choose three of the bulleted items from the Scenario section of this activity. Configure your changes on the copied topology. Note: By changing the Hello interval times, network instability may occur. You should be able to configure it; however, notice adjacencies status changing if you do choose this configuration option.
b. Save your work to avoid losing your configuration.
Step 4: Use verification commands to compare and contrast your default and fine-tuned
configurations.
a. Use, at least, three output commands to compare and contrast the two topologies, and copy them to a word processing software program. For example, some useful commands include:
show ip route
show running-configuration
show ip protocols, show ip eigrp neighbors
b. Share your work with another group. Explain how you changed the second topology from the first configured example. Justify what happened when you configured the three EIGRP fine-tuning options.
Instructor Resource Example
The information listed in this section is only one depiction of what students could see as a result of this activity. Other topology designs, addressing schemes, interface connections and router output comparisons may vary per student group.
Tweaking EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 6
Blank Topology Diagram Examples
Basic EIGRP
R1# show ip protocols
Routing Protocol is "eigrp 1 "
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0
EIGRP maximum hopcount 100
EIGRP maximum metric variance 1
Redistributing: eigrp 1
Automatic network summarization is not in effect
Maximum path: 4
Routing for Networks:
192.168.2.0
192.168.1.0
Routing Information Sources:
Gateway Distance Last Update
192.168.2.2 90 7550
Distance: internal 90 external 170
R1#
Fine-Tuned EIGRP
R1# show ip protocols
Routing Protocol is "eigrp 1 "
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0
EIGRP maximum hopcount 100
EIGRP maximum metric variance 1
Redistributing: eigrp 1, static
Automatic network summarization is not in effect
Maximum path: 4
Routing for Networks:
192.168.2.0
192.168.1.0
Routing Information Sources:
Gateway Distance Last Update
192.168.2.2 90 6693
Distance: internal 90 external 170
R1#
Tweaking EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 6
Basic EIGRP
R1# show ip route
<output omitted>
Gateway of last resort is not set
192.168.1.0/24 is variably subnetted, 6 subnets, 2 masks
C 192.168.1.0/27 is directly connected, GigabitEthernet0/0
L 192.168.1.1/32 is directly connected, GigabitEthernet0/0
C 192.168.1.32/27 is directly connected, GigabitEthernet0/1
L 192.168.1.33/32 is directly connected, GigabitEthernet0/1
D 192.168.1.64/27 [90/2170112] via 192.168.2.2, 00:14:26, Serial0/0/0
D 192.168.1.96/27 [90/2170112] via 192.168.2.2, 00:14:26, Serial0/0/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Serial0/0/0
L 192.168.2.1/32 is directly connected, Serial0/0/0
R1#
Fine-Tuned EIGRP
R1# show ip route
<output omitted>
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
192.168.1.0/24 is variably subnetted, 6 subnets, 3 masks
D 192.168.1.0/26 is a summary, 00:15:17, Null0
C 192.168.1.0/27 is directly connected, GigabitEthernet0/0
L 192.168.1.1/32 is directly connected, GigabitEthernet0/0
C 192.168.1.32/27 is directly connected, GigabitEthernet0/1
L 192.168.1.33/32 is directly connected, GigabitEthernet0/1
D 192.168.1.64/26 [90/2170112] via 192.168.2.2, 00:15:10, Serial0/0/0
192.168.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.2.0/24 is directly connected, Serial0/0/0
L 192.168.2.1/32 is directly connected, Serial0/0/0
S* 0.0.0.0/0 is directly connected, Serial0/0/0
R1#
Tweaking EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 6
Basic EIGRP
R1# show run
Building configuration...
Current configuration : 779 bytes
!
version 15.1
<output omitted>
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.224
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.33 255.255.255.224
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.2.1 255.255.255.0
clock rate 2000000
!
<output omitted>
!
router eigrp 1
network 192.168.2.0
network 192.168.1.0
no auto-summary
!
ip classless
!
<output omitted>
R1#
Fine-Tuned EIGRP
R1# show run
Building configuration...
Current configuration : 1013 bytes
!
version 15.1
<output omitted>
interface GigabitEthernet0/0
ip address 192.168.1.1 255.255.255.224
ip summary-address eigrp 1 192.168.1.0 255.255.255.192
5
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 192.168.1.33 255.255.255.224
ip summary-address eigrp 1 192.168.1.0 255.255.255.192
5
duplex auto
speed auto
!
interface Serial0/0/0
ip address 192.168.2.1 255.255.255.0
ip summary-address eigrp 1 192.168.1.0 255.255.255.192
5
clock rate 2000000
!
<output omitted>
!
router eigrp 1
redistribute static
network 192.168.2.0
network 192.168.1.0
no auto-summary
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0/0
!
<output omitted>
R1#
Tweaking EIGRP
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 6
Identify elements of the model that map to IT-related content:
Manual summary route
Default routes
Default routes propagation
Hello-interval timer settings
EIGRP routing protocol verification commands
Auto-summarization
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 3
IOS Detection (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
Manage IOS system image files to increase network reliability in a small- to medium-sized business network.
Students will compare and contrast different router and switch hardware capabilities and IOS software basics. Groups of two students will be created for this activity.
Scenario
Your school or university has just received a donation of Cisco routers and switches. You transport them from your shipping and receiving department to your Cisco networking lab and start sorting them into switch and router groups.
After all the equipment has been sorted, you cannot wait to turn them on to see if they really work. Once you do power them up, you find out that all of the equipment operating systems have been erased! Because computers use different operating systems, you think that routers and switches also use different internetworking operating systems (or IOS) as well.
One good thing you notice is that most of the routers are either models 1941 or 2911. The switch models are either 2960 or 3560. You have worked with this type of equipment in the past and know you can research which IOS is appropriate to purchase for each model. You also know that documenting hardware features, serial numbers, and MAC addresses is very important to do whenever you add networking equipment to any network topology.
Refer to the accompanying PDF for directions on how to proceed with this modeling activity. Save your work and share the data you found with another group or the entire class.
Resources
Packet Tracer software
Internet connectivity
Directions
Step 1: Create a switch and router matrix for documenting hardware and software information.
a. Design a matrix to record information about your two router models, 1941 and 2911. Both models are included in your Packet Tracer software. Record the following information in your matrix:
1) The system serial numbers of the equipment
2) The Cisco IOS type and version shown for each model
3) The name of the preferred system image file
4) How much NVRAM is present on the routers
5) How many and which types of interfaces are built in to the routers
b. Design a matrix to record information about your two switch models, 2960 and 3560, from Packet Tracer. Record the following information in your matrix:
1) The system serial number for this type of equipment
IOS Detection
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 3
2) The Cisco IOS type and version shown for these models
3) The name of the preferred SW image
4) How much NVRAM is present on the models
5) How many and which types of interfaces are built in to the switches
Step 2: Open Packet Tracer.
a. Place one router and switch for each router and switch model you will research on the desktop.
b. Open the router or switch models on Packet Tracer and use the show version command to display operating system and other information about your equipment.
c. Read and record the information found in Step 2b to your matrix designs.
Step 3: Visit http://www.cisco.com for further model research content.
a. Sign in to your account at cisco.com. If you do not have an account, create one.
b. Research your router and switch models for additional feature sets available for the models.
c. Note the physical hardware designs of the devices. Check if additional network cards can be installed; if so, record what types of cards can be installed for your router and switch models.
d. Mention some of these facts below in your two matrix designs.
Step 4: Document the information you found to share with the class or another group of
students.
Instructor Resource Example
The information listed in this section is only one depiction of what students could see as a result of this activity. Other designs may vary per student groups.
Cisco 1941 Router
System device serial number FTX152433T9 (each unit will show a different serial number)
IOS type & version C1900 Software (C1900-UNIVERSALK9-M), Version 15.1(4)M4
Preferred system image file flash0:c1900-universalk9-mz.SPA.151-1.M4.bin
NVRAM default 255 (256)K preferred
Number and types of built-in router interfaces
2 Gigabit Ethernet interfaces, with expandability options via WIC cards
Cisco 2911 Router
System device serial number FTX1524MH47 (each unit will show a different serial number)
IOS type & version C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M4
Preferred system image file C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(4)M4
NVRAM default 255 (256)K preferred
Number and types of built-in router interfaces
3 Gigabit Ethernet interfaces, with expandability options via WIC cards
IOS Detection
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 3
Cisco 2960 Switch
System device serial number FOC1033Z1EY
IOS type & version C2960 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)FX
Preferred system image file Version 12.2 C2960-LANBASE-M
NVRAM default 63488K
Number and types of built-in router interfaces
24 Fast Ethernet and 2 Gigabit Ethernet interfaces
Cisco 3560 Switch
System device serial number CAT1037RJF7
IOS type & version C3560 Software (C3560-ADVIPSERVICESK9-M), Version 12.2(37)SE1
Preferred system image file Version 12.2(37)SE1 C3560-ADVIPSERVICESK
NVRAM default 63488K
Number and types of built-in router interfaces
24 Fast Ethernet and 2 Gigabit Ethernet interfaces
Identify elements of the model that map to IT-related content:
IOS types
IOS names
Show version
NVRAM
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 8
Powerful Protocols (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objective
A review of EIGRP and OSPF routing protocol configuration and verification commands.
Students will review EIGRP and OSPF commands to complete the end-of-course Capstone Projects.
Scenario
At the end of this course, you are asked to complete two Capstone Projects where you will create, configure, and
verify two network topologies using the two main routing protocols taught in this course, EIGRP and OSPF.
To make things easier, you decide to create a chart of configuration and verification commands to use for these
two design projects. To help devise the protocol charts, ask another student in the class to help you.
Refer to the PDF for this chapter for directions on how to create a design for this modeling project. When
complete, share your work with another group or with the class. You may also want to save the files created for
this project in a network portfolio for future reference.
Resources
Previous curriculum chapter content for EIGRP and OSPF
Word processing software
Directions
Step 1: Create a matrix for each routing protocol (EIGRP and OSPF).
a. Within each routing protocol matrix, design two sections.
1) one section for configuration commands
2) one section for verification or show commands
b. Use a word processing program to save your matrix designs, one for EIGRP and one for OSPF.
Step 2: Review the chapters in this curriculum.
a. Refer to the different sections and activities presented in the curriculum.
1) Content
2) Labs
3) Packet Tracer Activities
b. Record configuration commands for each protocol on their respective matrix. Note: Some commands are universal, and some are used only for IPv4 or IPv6.
c. Record verification commands used for each protocol on their respective matrix. Note: Some of these commands are universal, and some are used only with IPv4or IPv6.
d. Leave extra, blank rows for the group or classroom portion of this activity.
Step 3: Meet as a class or with another group.
a. Compare configuration commands.
b. Compare verification commands.
Powerful Protocols
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 8
c. Add any commands to each matrix mentioned in the full- or group-setting that you did not record in your own group.
d. Save your work for use with the two Capstone projects which summarize this entire course.
Instructor Resource Example
The information listed in this section is only one depiction of what students could see as a result of this activity. Other designs may vary per student groups.
EIGRP Configuration and Verification Commands (summary)
Configuration Command Purpose
R1(config)# router eigrp 1 Enables the EIGRP routing
process on R1 using a process
ID of 1
R1(config-router)# network 172.16.1.0 0.0.0.255
R1(config-router)# network 172.16.3.0 0.0.0.3
R1(config-router)# network 192.168.10.4 0.0.0.3
Configures EIGRP to advertise
the specific directly connected
subnets
R1(config)# ipv6 unicast-routing *Enables IPv6 routing on each
router
R1(config)# ipv6 router eigrp 1
R1(config-rtr)# no shutdown
*Configures EIGRP for IPv6 routing on each router
R1(config-rtr)# router-id 1.1.1.1 Manual assignment of a router ID
to that particular router
R1(config)# int g0/0
R1(config-if)# ipv6 eigrp 1
R1(config)# int s0/0/0
R1(config-if)# ipv6 eigrp 1
R1(config)# int s0/0/1
R1(config-if)# ipv6 eigrp 1
*Interface configuration directions for assigning IPv6 EIGRP to an interface – must be done on each interface using the IPv6 EIGRP routing protocol
R1(config)# interface Serial0/0/0
R1(config-if)# ip summary-address eigrp 1 172.31.8.0
255.255.252.0
Allows R1 to send a manually
computed summary route
network address and prefix
through S0/0/0
R1(config)# interface Serial0/0/0
R1(config-if)# ipv6 summary-address eigrp 1
2001:DB8:ACAD:8::/62
Allows R1 to advertise a
manually computed IPv6
summary route network address
and prefix through S0/0/0
R1(config)# ip route 0.0.0.0 0.0.0.0 Serial0/1/0 Configures an IPv4 default route
R1(config)# router eigrp 1
R1(config-router)# redistribute static
Allows the EIGRP IPv4 default route to be propagated
Powerful Protocols
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 8
R1(config)# ipv6 route ::/0 Serial0/1/0 Configures an IPv6 default route
R1(config)# ipv6 router eigrp 1
R1(config-rtr)# redistribute static
Allows the IPv6 default route to be propagated
R1(config)# interface s0/0/0
R1(config-if)# ip hello-interval eigrp 1 10
Changes the EIGRP hello time
period to 10 seconds as
advertised out of s0/0/0
R1(config)# router eigrp 1
R1(config-router)# passive-interface gigabitethernet
0/0
Changes Gi0/0 to not send hello
packet for the EIGRP process to
its neighbors
R1(config)# interface s 0/0/0
R1(config-if)# bandwidth 64
Sets a particular bandwidth value
for a particular interface for
EIGRP DUAL calculations
R1(config)# interface s 0/0/1
R1(config-if)# ipv6 address fe80::1 link-local
R1(config-if)# exit
Sets a link-local address for a
router’s interface – in this case,
s0/0/1
R1(config)# router eigrp 1
R1(config-router)# auto-summary
Allows the EIGRP process to use
auto-summarization for the
routing table output
R1 (config)# key chain name-of-chain
R1 (config-keychain)# key key-id
R1 (config-keychain-key)# key-string key-string-text
R1(config)# interface type number
R1(config-if)# ip authentication mode eigrp as-number
md5
R1(config-if)# ip authentication key-chain eigrp as-
number name-of-chain
Creates security parameters to
use for authentication with
EIGRP
Configures actual authentication
using the keychain parameters
configured above
Verification Command Purpose
R1# show ip route Displays the known networks on
each router
R1# show ip eigrp neighbors Displays the neighbors
discovered by EIGRP – neighbor
adjacencies
R1# show ip protocols Shows parameters and other
information about the current
state of any active IPv4 routing
protocol processes
Powerful Protocols
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 8
R1# show ip eigrp topology Displays successor paths and
the networks recorded in the
topology table
R1# show ipv6 eigrp neighbors Verifies adjacencies with directly-
connected neighbors – link local
addresses
R1# show ipv6 route Displays IPv6 EIGRP routes
R1# show ipv6 protocols Verifies parameters and current
state of the active IPv6 routing
protocol processes
R1# show ip eigrp topology all-links Shows entries in the routing table
for EIGRP only – also shows
successors and feasible
successors and FD
R1# show ip int brief Shows link status on a particular
router using IPv4
R1# show ipv6 interface brief Shows link status on a particular
router using IPv6
R1# show running-configuration Displays configuration
information currently operating
on the router
Powerful Protocols
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 8
OSPF Configuration and Verification Commands (summary)
Configuration Command Purpose
R1(config)# router ospf 10 Enters OSPF for the router using 10 as the process id
R1(config)# router ospf 10
R1(config-router)# router-id 1.1.1.1
R1(config-router)# end
Assigns a router identification
address for use with OSPF 10
R1(config)# router ospf 10
R1(config-router)# network 172.16.1.0 0.0.0.255 area
0
R1(config-router)# network 172.16.3.0 0.0.0.3 area 0
R1(config-router)# network 192.168.10.4 0.0.0.3 area
0
Configures OSPF 10 with network
addresses and prefixes – area #
indicates to which OSPF group
the networks will belong
R1# clear ip ospf process Allows old OSPF information to
be cleared and new processes to
take effect – places old neighbors
in down state and allows new
adjacencies to be created
R1(config)# interface serial 0/0/1
R1(config-if)# bandwidth 1024
R1(config-if)# end
Adjusts the bandwidth for a
particular interface on a router –
used for IPv4 and IPv6
R1(config)# ipv6 unicast-routing
R1(config)# interface GigabitEthernet 0/0
R1(config-if)# description R1 LAN
R1(config-if)# ipv6 address 2001:DB8:CAFE:1::1/64
R1(config-if)# no shut
Allows IPv6 OSPF to be used for
OSPFv3 for one interface (Gi0/0)
– must be configured for each
interface on the router
R1(config)# interface GigabitEthernet 0/0
R1(config-if)# ipv6 ospf 10 area 0
R1(config-if)# nd
Assigns OSPFv3 for IPv6 for
processes and areas on specific
interfaces – must be configured
per interface on the router
R1(config)# interface GigabitEthernet 0/0
R1(config-if)# ipv6 address fe80::1 link-local
R1(config-if)# exit
IPv6 command which assigns a
Link Local network address to an
interface – configured per
interface
R1(config)# ipv6 router ospf 10
R1(config-rtr)# router-id 1.1.1.1
R1(config-rtr)# auto-cost reference-bandwidth 1000
% OSPFv3-1-IPv6: Reference bandwidth is changed.
Please ensure reference bandwidth is
consistent across all routers.
IPv6 commands which assign a
router ID and bandwidth to a
particular OSPF process and
router – configured separately per
router
Powerful Protocols
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 8
R1(config-rtr)# end
R1# clear ipv6 ospf process Allows a reset of the IPv6 OSPF
processes so that new
information can be propagated on
the router for OSPF
R1(config)# interface GigabitEthernet 0/0
R1(config-if)# ip ospf priority 255
R1(config-if)# end
Changes the interface/link priority
to a higher or lower number for
DR/BDR election – changing to 0,
leaves that router’s interface out
of the election process.
Changing the priority to 255
makes it the highest priority
available to the election process
R1(config)# ip route 0.0.0.0 0.0.0.0 loopback 0
209.165.200.226
R1(config)# router ospf 10
R1(config-router)# default-information originate
R1(config-router)# end
Sets an IPv4 OSPF default route
for a router, assigns that route to
the OSPF 10 process and
propagates the route
R1(config)# ipv6 route 0::/0 loopback0
2001:DB8:FEED:1::2
R1(config)# ipv6 router ospf 10
R1(config-rtr)# default-information originate
R1(config-rtr)# end
Enables OSPFv3 for IPv6 on an
interface for the router –
propagates the information
R1(config)# interface Serial 0/0/0
R1(config-if)# ipv6 ospf hello-interval 5
R1(config-if)# ipv6 ospf dead-interval 20
R1(config-if)# end
Changes IPv6 Hello and Dead
timer intervals to lower or higher
values for link reporting and
neighbor adjacencies using
OSPFv3
R1(config)# router ospf 10
R1(config-router)# area 0 authentication message-
digest
R1(config-router)# exit
R1(config)# interface GigabitEthernet 0/0
R1(config-if)# ip ospf message-digest-key 1 md5
CISCO-123
R1(config-if)# exit
Enables area authentication
Sets values per interface for
authentication type and password
or key
R1(config)# router ospf 10
R1(config-router)# area 1 range 10.1.0.0
255.255.252.0
R1(config-router)# exit
Summarizes OSPF routes into a
range for OSPF inter-area
configurations – used to create
Null routes for packets processing
and discard
Powerful Protocols
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 8
Verification Command Purpose
R1# show ip ospf neighbor command. Shows the Adjacency database
and Neighbor table
Lists all neighbor routers to which a router has established bidirectional communication.
This table is unique for each
router.
R1# show ip ospf database Shows the Link-state database
and topology table - Lists
information about all other routers
in the network and shows the
network topology.
Also shows area numbers and
link IDs within the areas
R1# show ip protocols Displays the router ID, networks
recognized for routing, the
gateway, distance and last
update information for the router
and its protocols
R1# show ip ospf interface serial 0/0/0 Displays status of the interface
(or link), bandwidth, the internet
address of the interface, status of
the protocol (up or down), router
ID, network type (for example,
point-to-point), cost of the
interface/link, hello, dead, wait
and transmit intervals in seconds,
and neighbors adjacencies
Shows priority setting
Also shows the interface’s DR or
BDR with their accompanying
addresses and router IDs
R1# show ip ospf Verifies the router’s OSPF process in its entirety
Powerful Protocols
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 8
R1# show ip ospf interface brief Verifies the interfaces/links a
particular router, the network
assigned to the interfaces, cost,
state and number of neighbors on
that interface
R1# show ipv6 interface brief IPv6 command which lists the
interfaces participating with
OSPF, their Link Local address
and their IPv6 address – also lists
the status of the interfaces (up or
down)
R1# show ipv6 protocols IPv6 command which shows the
process number, router ID,
number of areas, etc.
R1# show ipv6 route ospf Shows IPv6 routing table
information – includes type of
route (OSPF), IPv6 address/prefix
of network being reported, and
which interface reported the
information
R2# show ipv6 route static Displays only static routes for
IPv6 as reported through the
routing table
Identify elements of the model that map to IT-related content:
EIGRP IPv4 configuration commands
EIGRP IPv4 verification commands
OSPF IPv6 configuration commands
OSPF IPv6 verification commands
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 18
EIGRP Capstone Project
(Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
In this Capstone Project activity, you will demonstrate your ability to:
Design, configure, verify, and secure EIGRP, IPv4 or IPv6 on a network
Design a VLSM addressing scheme for the devices connected to the LANs
Present your design using network documentation from your Capstone Project network
Instructor Note: This activity is best completed in groups of 2-3 students.
Scenario
You are a network engineer for your small- to medium-sized business. You and your team have been asked to design an IPv4 or IPv6 network that uses the EIGRP routing protocol.
The network consists of four branches that is connected to a headquarters router. The headquarters then connects to an ISP router.
Your job is to create an EIGRP-based, VLSM addressed network scheme using IPv4 or IPv6 to accommodate the number of hosts requested for this Capstone Project.
Required Resources
Packet Tracer software
Word processing or presentation software
Step 1: Design the network topology.
a. Network equipment:
1) Six routers
(a) Four branch routers
(b) One headquarters router
(c) One ISP router
2) Switches to support the LANS
b. LANs:
1) Two LANs per branch router
(a) Two LANs with 500 hosts
(b) One LAN serving 120 hosts
(c) One LAN with 200 hosts
(d) Two LANS with 80 hosts
(e) One LAN with 60 hosts
(f) One LAN with 30 hosts
2) One, three-host LAN assigned to the ISP router for server connectivity (DNS, Web, and TFTP).
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 10
OSPF Capstone Project (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
Configure basic OSPFv2 to enable internetwork communications in a small- to medium-sized IPv4 business network.
Implement advanced OSPF features to enhance operation in a small- to medium-sized business network.
Implement multiarea OSPF for IPv4 to enable internetwork communications in a small- to medium-sized business network.
Configure basic OSPFv3 to enable internetwork communications in a small- to medium-sized IPv6 business network.
Instructor Notes:
Students should be able to design, configure, and secure OSPF in a network.
Documentation is a large factor of this project and students must be able to explain their network design and verification through the use of show commands.
This activity is: - Best completed in groups of 2-3 students - Suggested to be a graded assignment after completing all of the OSPF Chapters
Scenario
Your company has made the decision to implement the OSPF routing protocol on its network. You have decided that you need to review the concepts related to OSPF in order to make a smooth transition to this protocol.
Create a network using Packet Tracer. Configure the network with these OSPF routing protocol options:
Multiarea OSPFv2
Single-area OSPFv3
Bandwidth
Cost
Authentication
Default routes
DR and BDR elections for segments
Required Resources
Packet Tracer
Student/group-created rubric for assessment of the assignment
Step 1: Design and build a network from scratch.
a. Your design must include three routers connected to a multi-access network in area 0 for use with IPv4.
1) Enable authentication.
2) Establish the DR and BDR using the router id command.
Step 2: Add one additional router with two connections to area 0, representing another OSPF area.
Step 3: Configure the bandwidth or cost to favor one route.
OSPF Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 10
Step 4: Add a network containing end devices and a passive OSPF interface.
Step 5: Add a route to a default network such as the Internet.
Step 6: Add an IPv6 addressing scheme on the routers and configure OSPFv3.
a. Enable IPv6 unicast routing.
b. Establish the DR and BDR using the router id command.
c. Do not configure timers, bandwidth, cost, default routes, or authentication.
Instructor-Sample Rubric
The example rubric includes a total of 100 points for the points earned category, if minimum standards are met. Instructors may wish to consider adding bonus points for additional/advanced work in any requirement category.
Requirement Points Earned
Physical Topology
A minimum three routers are present in area 0.
One router exists in another area.
One Internet connection with one PC exists in the topology.
(10 suggested)
Logical Addressing and Connectivity
IPv4 and IPv6 networks should have full connectivity. Connectivity is verified with pings to every IP, including the Internet.
(20 suggested)
OSPF Requirement 1
Two OSPFv2 areas exist.
Two OSPFv3 areas exist.
(20 suggested)
OSPF Requirement 2
OSPF authentication and passive interfaces are used to secure the protocol.
(20 suggested)
OSPF Requirement 3
Router IDs are used for the election of the DR and BDR.
(10 suggested)
OSPF Requirement 4
The OSPF cost is changed to manipulate preferred routes.
(10 suggested)
OSPF Requirement 5
Static routes and default information originate are used to reach the Internet.
(10 suggested)
OSPF Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 10
Instructor Topology Example Solution
OSPF Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 10
Suggested Addressing Table
Device Interface
IPv4 Address Subnet Mask Default Gateway
IPv6 Address/Prefix Router ID
R1
G0/0 172.16.1.1 255.255.255.0
10.1.1.1
G0/2 10.0.0.1 255.255.255.0
G0/0 2001:DB8:1:11::1/64
G0/2 2001:DB8:1:123::1/64
Link-local FE80::1
R2
G0/0 172.16.2.1 255.255.255.0
10.2.2.2
G0/2 10.0.0.2 255.255.255.0
S0/0/0 64.104.73.242 255.255.255.240
G0/0 2001:DB8:1:22::1/64
G0/2 2001:DB8:1:123::2/64
S0/0/0 2001:DB8:1:2::1/64
Link-local FE80::2
R3
G0/0 172.16.0.1 255.255.255.0
10.3.3.3
G0/2 10.0.0.2 255.255.255.0
G0/0 2001:DB8:1:33::1/64
G0/2 2001:DB8:1:123::3/64
Link-local FE80::3
A2
G0/0 172.16.2.2 255.255.255.0
2.2.2.2
G0/2 172.16.1.2 255.255.255.0
G0/0 2001:DB8:1:22::2/64
G0/2 2001:DB8:1:11::2/64
Link-local FE80::A
L3 NIC 172.16.0.1 255.255.255.0 172.16.0.1
NIC 2001:DB8:1:33::1/64 FE80::3
OSPF Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 10
Device Configurations After Completion of the Activity
R1# show run
Building configuration...
Current configuration : 1291 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1
!
ipv6 unicast-routing
!
license udi pid CISCO2911/K9 sn FTX1524UZ5Y
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
ip address 172.16.1.1 255.255.255.0
ip ospf message-digest-key 1 md5 Area2
duplex auto
speed auto
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:1:11::1/64
ipv6 ospf 1 area 2
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface GigabitEthernet0/2
ip address 10.0.0.1 255.255.255.0
ip ospf message-digest-key 1 md5 Area0
duplex auto
speed auto
ipv6 address FE80::1 link-local
ipv6 address 2001:DB8:1:123::1/64
ipv6 ospf 1 area 0
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
no ip address
shutdown
!
interface Vlan1
no ip address
shutdown
!
router ospf 1
router-id 10.1.1.1
log-adjacency-changes
area 0 authentication message-digest
area 2 authentication message-digest
network 10.0.0.0 0.0.0.255 area 0
network 172.16.1.0 0.0.0.255 area 2
OSPF Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 10
!
ipv6 router ospf 1
router-id 10.1.1.1
log-adjacency-changes
!
ip classless
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
R2# show run
Building configuration...
Current configuration : 1494 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R2
!
ipv6 unicast-routing
!
license udi pid CISCO2911/K9 sn FTX1524GRRS
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
ip address 172.16.2.1 255.255.255.0
ip ospf message-digest-key 1 md5 Area2
duplex auto
speed auto
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:1:22::1/64
ipv6 ospf 1 area 2
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface GigabitEthernet0/2
ip address 10.0.0.2 255.255.255.0
ip ospf message-digest-key 1 md5 Area0
duplex auto
speed auto
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:1:123::2/64
ipv6 ospf 1 area 0
!
interface Serial0/0/0
ip address 64.104.73.242 255.255.255.240
ipv6 address FE80::2 link-local
ipv6 address 2001:DB8:1:2::1/64
ipv6 ospf 1 area 0
OSPF Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 10
!
interface Serial0/0/1
no ip address
shutdown
!
interface Vlan1
no ip address
shutdown
!
router ospf 1
router-id 10.2.2.2
log-adjacency-changes
area 0 authentication message-digest
area 2 authentication message-digest
passive-interface Serial0/0/0
network 10.0.0.0 0.0.0.255 area 0
network 172.16.2.0 0.0.0.255 area 2
default-information originate
!
ipv6 router ospf 1
router-id 10.2.2.2
log-adjacency-changes
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0/0
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
R3# show run
Building configuration...
Current configuration : 1291 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R3
!
ipv6 unicast-routing
!
license udi pid CISCO2911/K9 sn FTX15247W10
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
ip address 172.16.0.1 255.255.255.0
ip ospf message-digest-key 1 md5 Area0
duplex auto
speed auto
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:1:33::1/64
ipv6 ospf 1 area 0
!
interface GigabitEthernet0/1
OSPF Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 10
no ip address
duplex auto
speed auto
shutdown
!
interface GigabitEthernet0/2
ip address 10.0.0.3 255.255.255.0
ip ospf message-digest-key 1 md5 Area0
duplex auto
speed auto
ipv6 address FE80::3 link-local
ipv6 address 2001:DB8:1:123::3/64
ipv6 ospf 1 area 0
!
interface Serial0/0/0
no ip address
shutdown
!
interface Serial0/0/1
no ip address
shutdown
!
interface Vlan1
no ip address
shutdown
!
router ospf 1
router-id 10.3.3.3
log-adjacency-changes
area 0 authentication message-digest
passive-interface GigabitEthernet0/0
network 10.0.0.0 0.0.0.255 area 0
network 172.16.0.0 0.0.0.255 area 0
!
ipv6 router ospf 1
router-id 10.3.3.3
log-adjacency-changes
!
ip classless
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
A2# show run
Building configuration...
Current configuration : 1157 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname A2
!
ipv6 unicast-routing
!
OSPF Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 10
license udi pid CISCO2911/K9 sn FTX1524DVBW
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
ip address 172.16.2.2 255.255.255.0
ip ospf message-digest-key 1 md5 Area2
ip ospf cost 2000
duplex auto
speed auto
ipv6 address FE80::A link-local
ipv6 address 2001:DB8:1:22::2/64
ipv6 ospf 1 area 2
!
interface GigabitEthernet0/1
ip address 172.16.1.2 255.255.255.0
ip ospf message-digest-key 1 md5 Area2
ip ospf cost 1000
duplex auto
speed auto
ipv6 address FE80::A link-local
ipv6 address 2001:DB8:1:11::2/64
ipv6 ospf 1 area 2
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
router ospf 1
router-id 2.2.2.2
log-adjacency-changes
area 2 authentication message-digest
network 172.16.2.0 0.0.0.255 area 2
!
ipv6 router ospf 1
router-id 2.2.2.2
log-adjacency-changes
!
ip classless
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
End
Show IP Route
R1>en
R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
OSPF Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 10
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 10.0.0.2 to network 0.0.0.0
10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 10.0.0.0/24 is directly connected, GigabitEthernet0/2
L 10.0.0.1/32 is directly connected, GigabitEthernet0/2
172.16.0.0/16 is variably subnetted, 4 subnets, 2 masks
O 172.16.0.0/24 [110/2] via 10.0.0.3, 00:02:18, GigabitEthernet0/2
C 172.16.1.0/24 is directly connected, GigabitEthernet0/0
L 172.16.1.1/32 is directly connected, GigabitEthernet0/0
O IA 172.16.2.0/24 [110/2] via 10.0.0.2, 00:02:18, GigabitEthernet0/2
O*E2 0.0.0.0/0 [110/1] via 10.0.0.2, 00:02:18, GigabitEthernet0/2
Show IP Protocols
R1# show ip protocols
Routing Protocol is "ospf 1"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Router ID 10.1.1.1
Number of areas in this router is 2. 2 normal 0 stub 0 nssa
Maximum path: 4
Routing for Networks:
10.0.0.0 0.0.0.255 area 0
172.16.1.0 0.0.0.255 area 2
Routing Information Sources:
Gateway Distance Last Update
10.1.1.1 110 00:08:18
10.2.2.2 110 00:07:29
10.3.3.3 110 00:07:38
Distance: (default is 110)
Show IP OSPF Neighbor
R1# show ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface
10.3.3.3 1 FULL/DR 00:00:33 10.0.0.3 GigabitEthernet0/2
10.2.2.2 1 FULL/BDR 00:00:33 10.0.0.2 GigabitEthernet0/2
Show IP Interface Brief
R1# show ip int brief
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 172.16.1.1 YES manual up up
GigabitEthernet0/1 unassigned YES unset administratively down down
GigabitEthernet0/2 10.0.0.1 YES manual up up
Serial0/0/0 unassigned YES unset administratively down down
Serial0/0/1 unassigned YES unset administratively down down
Vlan1 unassigned YES unset administratively down down
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 18
EIGRP Capstone Project
(Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only.
Objectives
In this Capstone Project activity, you will demonstrate your ability to:
Design, configure, verify, and secure EIGRP, IPv4 or IPv6 on a network
Design a VLSM addressing scheme for the devices connected to the LANs
Present your design using network documentation from your Capstone Project network
Instructor Note: This activity is best completed in groups of 2-3 students.
Scenario
You are a network engineer for your small- to medium-sized business. You and your team have been asked to design an IPv4 or IPv6 network that uses the EIGRP routing protocol.
The network consists of four branches that is connected to a headquarters router. The headquarters then connects to an ISP router.
Your job is to create an EIGRP-based, VLSM addressed network scheme using IPv4 or IPv6 to accommodate the number of hosts requested for this Capstone Project.
Required Resources
Packet Tracer software
Word processing or presentation software
Step 1: Design the network topology.
a. Network equipment:
1) Six routers
(a) Four branch routers
(b) One headquarters router
(c) One ISP router
2) Switches to support the LANS
b. LANs:
1) Two LANs per branch router
(a) Two LANs with 500 hosts
(b) One LAN serving 120 hosts
(c) One LAN with 200 hosts
(d) Two LANS with 80 hosts
(e) One LAN with 60 hosts
(f) One LAN with 30 hosts
2) One, three-host LAN assigned to the ISP router for server connectivity (DNS, Web, and TFTP).
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 18
Step 2: Devise the network addressing scheme.
a. Use any RFC 1918 Class B address that will accommodate the specifications listed in Step 1.
b. ISPs LAN connection will use a different IPv4 network number to indicate Internet or telecommunications connectivity to the servers.
c. Use VLSM efficiently to conserve addresses and allow for scalability.
d. Apply the network address scheme to hosts and LAN and WAN interfaces.
Step 3: Implement the EIGRP routing protocol on your network
a. Requirements:
1) Advertise directly connected networks using the wildcard mask.
2) Disable automatic summarization.
3) Disable routing updates from being sent across the LAN interfaces.
4) Implement one, named extended ACL on the network.
b. Recommendations (choose two):
1) Selectively implement EIGRP summary routes.
2) Modify the EIGRP hello-timers.
3) Modify the bandwidth of the interfaces.
Step 4: Configure basic security
a. Restrict access to the console connection.
b. Configure encrypted passwords.
c. Restrict access to the VTY connections.
d. Configure a banner warning.
Step 5: Backup the configurations of each router to the TFTP server.
Step 6: Verify the network.
a. Validate connectivity by pinging all devices.
b. Use five show commands to verify EIGRP configuration.
Step 7: Present your Capstone Project to the class and be able to answer questions from your
peers and Instructor.
Instructor notes: This Modeling Activity is suggested to be a graded assignment after completing Chapters 1-11. Students should be able to show how small networks are designed, configured, verified and secured. Documentation is a large factor of this project and students must be able to explain their network design and verification through the use of show commands.
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 18
Instructor-Sample Solutions
Topology (this example topology can be used with IPv4 or IPv6 addressing)
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 18
Instructor Rubric Example
Requirement Points
Network Topology
Six routers
Nine LANs
Network switches, as necessary
10
Network Addressing
Class B, IPv4 with VLSM applied correctly to networks
IPv6 applied correctly to networks
20
EIGRP Configuration
Wildcard masks used
Auto-summary disabled
LAN EIGRP routing updates disabled
One extended, named ACL configured and operational
10
Network Security
Encrypted passwords
Console access secured
VTY lines secured
Warning banner present
10
Router configurations backed up to the TFTP server 5
Full network connectivity is present and verified 15
Capstone Project presentation 30
Sample Outputs (IPv4)
Show IP Route
HQ# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 0.0.0.0 to network 0.0.0.0
172.31.0.0/16 is variably subnetted, 15 subnets, 7 masks
D 172.31.0.0/21 is a summary, 00:15:26, Null0
D 172.31.0.0/23 [90/2170112] via 172.31.7.2, 00:15:26, Serial0/0/0
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 18
D 172.31.2.0/23 [90/2170112] via 172.31.7.2, 00:15:26, Serial0/0/0
D 172.31.4.0/23 [90/2170112] via 172.31.7.10, 00:15:28, Serial0/1/0
[90/2170112] via 172.31.7.6, 00:15:24, Serial0/0/1
D 172.31.6.0/25 [90/2170112] via 172.31.7.10, 00:15:28, Serial0/1/0
D 172.31.6.128/26 [90/2170112] via 172.31.7.14, 00:15:25, Serial0/1/1
D 172.31.6.192/27 [90/2170112] via 172.31.7.14, 00:15:25, Serial0/1/1
C 172.31.7.0/30 is directly connected, Serial0/0/0
L 172.31.7.1/32 is directly connected, Serial0/0/0
C 172.31.7.4/30 is directly connected, Serial0/0/1
L 172.31.7.5/32 is directly connected, Serial0/0/1
C 172.31.7.8/30 is directly connected, Serial0/1/0
L 172.31.7.9/32 is directly connected, Serial0/1/0
C 172.31.7.12/30 is directly connected, Serial0/1/1
L 172.31.7.13/32 is directly connected, Serial0/1/1
209.165.200.0/24 is variably subnetted, 2 subnets, 2 masks
C 209.165.200.0/27 is directly connected, Serial0/2/1
L 209.165.200.2/32 is directly connected, Serial0/2/1
S* 0.0.0.0/0 is directly connected, Serial0/2/1
HQ#
ISP# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 209.165.200.2 to network 0.0.0.0
172.31.0.0/21 is subnetted, 1 subnets
D 172.31.0.0/21 [90/2681856] via 209.165.200.2, 00:00:25, Serial0/0/0
192.0.2.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.0.2.0/24 is directly connected, GigabitEthernet0/0
L 192.0.2.254/32 is directly connected, GigabitEthernet0/0
209.165.200.0/24 is variably subnetted, 2 subnets, 2 masks
C 209.165.200.0/27 is directly connected, Serial0/0/0
L 209.165.200.1/32 is directly connected, Serial0/0/0
D*EX 0.0.0.0/0 [170/7289856] via 209.165.200.2, 00:00:25, Serial0/0/0
ISP#
Branch1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 18
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 172.31.7.1 to network 0.0.0.0
172.31.0.0/16 is variably subnetted, 13 subnets, 6 masks
C 172.31.0.0/23 is directly connected, GigabitEthernet0/0
L 172.31.1.254/32 is directly connected, GigabitEthernet0/0
C 172.31.2.0/23 is directly connected, GigabitEthernet0/1
L 172.31.3.254/32 is directly connected, GigabitEthernet0/1
D 172.31.4.0/23 [90/2682112] via 172.31.7.1, 00:20:57, Serial0/0/0
D 172.31.6.0/25 [90/2682112] via 172.31.7.1, 00:20:57, Serial0/0/0
D 172.31.6.128/26 [90/2682112] via 172.31.7.1, 00:20:57, Serial0/0/0
D 172.31.6.192/27 [90/2682112] via 172.31.7.1, 00:20:57, Serial0/0/0
C 172.31.7.0/30 is directly connected, Serial0/0/0
L 172.31.7.2/32 is directly connected, Serial0/0/0
D 172.31.7.4/30 [90/2681856] via 172.31.7.1, 00:20:57, Serial0/0/0
D 172.31.7.8/30 [90/2681856] via 172.31.7.1, 00:20:57, Serial0/0/0
D 172.31.7.12/30 [90/2681856] via 172.31.7.1, 00:20:57, Serial0/0/0
D 192.0.2.0/24 [90/2682112] via 172.31.7.1, 00:01:37, Serial0/0/0
209.165.200.0/27 is subnetted, 1 subnets
D 209.165.200.0/27 [90/2681856] via 172.31.7.1, 00:20:57, Serial0/0/0
D*EX 0.0.0.0/0 [170/7289856] via 172.31.7.1, 00:20:57, Serial0/0/0
Show Access Lists
HQ# show access-lists
Extended IP access list WEB_ACCESS
10 permit tcp host 172.31.0.1 host 192.0.2.3 eq www
20 permit tcp host 172.31.0.1 host 192.0.2.3 eq 443
30 permit tcp host 172.31.4.1 host 192.0.2.3 eq www
40 permit tcp host 172.31.4.1 host 192.0.2.3 eq 443
50 deny tcp any host 192.0.2.3 eq www
60 deny tcp any host 192.0.2.3 eq 443
70 permit ip any any
Branch1# show access-lists
Standard IP access list NO_ACCESS
10 permit host 172.31.0.1
20 permit host 172.31.2.1
Show IP Protocol
HQ# show ip protocol
Routing Protocol is "eigrp 100"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 18
EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0
EIGRP maximum hopcount 100
EIGRP maximum metric variance 1
Redistributing: eigrp 100, static
Automatic network summarization is not in effect
Maximum path: 4
Routing for Networks:
172.31.7.0/30
172.31.7.4/30
172.31.7.8/30
172.31.7.12/30
209.165.200.0/27
Routing Information Sources:
Gateway Distance Last Update
172.31.7.14 90 5099
172.31.7.10 90 6890
172.31.7.2 90 8081
172.31.7.6 90 9139
Distance: internal 90 external 170
Branch1# show ip protocol
Routing Protocol is "eigrp 100"
Outgoing update filter list for all interfaces is not set
Incoming update filter list for all interfaces is not set
Default networks flagged in outgoing updates
Default networks accepted from incoming updates
EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0
EIGRP maximum hopcount 100
EIGRP maximum metric variance 1
Redistributing: eigrp 100
Automatic network summarization is not in effect
Maximum path: 4
Routing for Networks:
172.31.0.0/23
172.31.2.0/23
172.31.7.0/30
Passive Interface(s):
GigabitEthernet0/0
GigabitEthernet0/1
Routing Information Sources:
Gateway Distance Last Update
172.31.7.1 90 8082
Distance: internal 90 external 170
Show ip eigrp topology
HQ# show ip eigrp topology
IP-EIGRP Topology Table for AS 100
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 18
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - Reply status
P 172.31.7.12/30, 1 successors, FD is 2169856
via Connected, Serial0/1/1
P 172.31.7.8/30, 1 successors, FD is 2169856
via Connected, Serial0/1/0
P 172.31.7.0/30, 1 successors, FD is 2169856
via Connected, Serial0/0/0
P 172.31.7.4/30, 1 successors, FD is 2169856
via Connected, Serial0/0/1
P 172.31.6.128/26, 1 successors, FD is 2170112
via 172.31.7.14 (2170112/2816), Serial0/1/1
P 172.31.6.192/27, 1 successors, FD is 2170112
via 172.31.7.14 (2170112/2816), Serial0/1/1
P 172.31.6.0/25, 1 successors, FD is 2170112
via 172.31.7.10 (2170112/2816), Serial0/1/0
P 172.31.4.0/23, 2 successors, FD is 2170112
via 172.31.7.10 (2170112/2816), Serial0/1/0
via 172.31.7.6 (2170112/2816), Serial0/0/1
P 172.31.0.0/23, 1 successors, FD is 2170112
via 172.31.7.2 (2170112/2816), Serial0/0/0
P 172.31.2.0/23, 1 successors, FD is 2170112
via 172.31.7.2 (2170112/2816), Serial0/0/0
P 0.0.0.0/0, 1 successors, FD is 6777856
via Rstatic (6777856/0)
P 209.165.200.0/27, 1 successors, FD is 2169856
via Connected, Serial0/2/1
P 172.31.0.0/21, 1 successors, FD is 2169856
via Summary (2169856/0), Null0
Branch1# show ip eigrp topology
IP-EIGRP Topology Table for AS 100
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - Reply status
P 172.31.0.0/23, 1 successors, FD is 2816
via Connected, GigabitEthernet0/0
P 172.31.2.0/23, 1 successors, FD is 2816
via Connected, GigabitEthernet0/1
P 172.31.7.0/30, 1 successors, FD is 1340928
via Connected, Serial0/0/0
P 172.31.7.12/30, 1 successors, FD is 2681856
via 172.31.7.1 (2681856/2169856), Serial0/0/0
P 172.31.7.8/30, 1 successors, FD is 2681856
via 172.31.7.1 (2681856/2169856), Serial0/0/0
P 172.31.7.4/30, 1 successors, FD is 2681856
via 172.31.7.1 (2681856/2169856), Serial0/0/0
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 18
P 172.31.6.128/26, 1 successors, FD is 2682112
via 172.31.7.1 (2682112/2170112), Serial0/0/0
P 172.31.6.192/27, 1 successors, FD is 2682112
via 172.31.7.1 (2682112/2170112), Serial0/0/0
P 172.31.6.0/25, 1 successors, FD is 2682112
via 172.31.7.1 (2682112/2170112), Serial0/0/0
P 172.31.4.0/23, 1 successors, FD is 2682112
via 172.31.7.1 (2682112/2170112), Serial0/0/0
P 0.0.0.0/0, 1 successors, FD is 7289856
via 172.31.7.1 (7289856/6777856), Serial0/0/0
P 209.165.200.0/27, 1 successors, FD is 2681856
via 172.31.7.1 (2681856/2169856), Serial0/0/0
TFTP Configuration (may be used with IPv4 and IPv6 projects)
Sample Outputs (IPv6)
Show IPv6 Interface
HQ# show ipv6 interface
Serial0/0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::260:3EFF:FE77:E701
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:ACAD:9::, subnet is 2001:DB8:ACAD:9::/127
Joined group address(es):
FF02::1
FF02::2
FF02::A
FF02::1:FF00:0
FF02::1:FF77:E701
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 18
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
Hosts use stateless autoconfig for addresses.
Serial0/0/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::260:3EFF:FE77:E702
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:ACAD:9::2, subnet is 2001:DB8:ACAD:9::2/127
Joined group address(es):
FF02::1
FF02::2
FF02::A
FF02::1:FF00:2
FF02::1:FF77:E702
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
Hosts use stateless autoconfig for addresses.
Serial0/1/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::2D0:BCFF:FE0E:5201
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:ACAD:9::4, subnet is 2001:DB8:ACAD:9::4/127
Joined group address(es):
FF02::1
FF02::2
FF02::A
FF02::1:FF00:4
FF02::1:FF0E:5201
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
Hosts use stateless autoconfig for addresses.
Serial0/1/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::2D0:BCFF:FE0E:5202
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:ACAD:9::6, subnet is 2001:DB8:ACAD:9::6/127
Joined group address(es):
FF02::1
FF02::2
FF02::A
FF02::1:FF00:6
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 11 of 18
FF02::1:FF0E:5202
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
Hosts use stateless autoconfig for addresses.
Serial0/2/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::202:4AFF:FE35:602
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:ABCD::, subnet is 2001:DB8:ABCD::/127
Joined group address(es):
FF02::1
FF02::2
FF02::A
FF02::1:FF00:0
FF02::1:FF35:602
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
Hosts use stateless autoconfig for addresses.
Vlan1 is administratively down, line protocol is down
Internet protocol processing disabled
ISP# show ipv6 interface
GigabitEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::260:2FFF:FE66:401
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:CAFE:1::, subnet is 2001:DB8:CAFE:1::/64
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:0
FF02::1:FF66:401
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised retransmit interval is 0 milliseconds
ND router advertisements are sent every 200 seconds
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 18
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
Serial0/0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::260:3EFF:FE10:B901
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:ABCD::1, subnet is 2001:DB8:ABCD::/127
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:1
FF02::1:FF10:B901
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
Hosts use stateless autoconfig for addresses.
Vlan1 is administratively down, line protocol is down
Internet protocol processing disabled
Branch1# show ipv6 interface
GigabitEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::201:C9FF:FE85:3A01
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:ACAD:1:FFFF:FFFF:FFFF:FFFF, subnet is 2001:DB8:ACAD:1::/64
Joined group address(es):
FF02::1
FF02::2
FF02::A
FF02::1:FF85:3A01
FF02::1:FFFF:FFFF
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised retransmit interval is 0 milliseconds
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
GigabitEthernet0/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::201:C9FF:FE85:3A02
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 13 of 18
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:ACAD:2:FFFF:FFFF:FFFF:FFFF, subnet is 2001:DB8:ACAD:2::/64
Joined group address(es):
FF02::1
FF02::2
FF02::A
FF02::1:FF85:3A02
FF02::1:FFFF:FFFF
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised retransmit interval is 0 milliseconds
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
Serial0/0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::202:17FF:FEE2:A401
No Virtual link-local address(es):
Global unicast address(es):
2001:DB8:ACAD:9::1, subnet is 2001:DB8:ACAD:9::/127
Joined group address(es):
FF02::1
FF02::2
FF02::A
FF02::1:FF00:1
FF02::1:FFE2:A401
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
Hosts use stateless autoconfig for addresses.
Vlan1 is administratively down, line protocol is down
Internet protocol processing disabled
Show IPv6 Route
HQ# show ipv6 route
IPv6 Routing Table - 17 entries
Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP
U - Per-user Static route, M - MIPv6
I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 18
O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
D - EIGRP, EX - EIGRP external
S ::/0 [1/0]
via ::, Serial0/2/1
C 2001:DB8:ABCD::/127 [0/0]
via ::, Serial0/2/1
L 2001:DB8:ABCD::/128 [0/0]
via ::, Serial0/2/1
D 2001:DB8:ACAD::/60 [5/2169856]
via ::, Null0
D 2001:DB8:ACAD::/61 [90/2170112]
via FE80::2D0:FFFF:FE73:E101, Serial0/0/1
D 2001:DB8:ACAD::/62 [90/2170112]
via FE80::202:17FF:FEE2:A401, Serial0/0/0
D 2001:DB8:ACAD:5::/64 [90/2170112]
via FE80::20D:BDFF:FE23:9801, Serial0/1/0
D 2001:DB8:ACAD:6::/64 [90/2170112]
via FE80::20D:BDFF:FE23:9801, Serial0/1/0
C 2001:DB8:ACAD:9::/127 [0/0]
via ::, Serial0/0/0
L 2001:DB8:ACAD:9::/128 [0/0]
via ::, Serial0/0/0
C 2001:DB8:ACAD:9::2/127 [0/0]
via ::, Serial0/0/1
L 2001:DB8:ACAD:9::2/128 [0/0]
via ::, Serial0/0/1
C 2001:DB8:ACAD:9::4/127 [0/0]
via ::, Serial0/1/0
L 2001:DB8:ACAD:9::4/128 [0/0]
via ::, Serial0/1/0
C 2001:DB8:ACAD:9::6/127 [0/0]
via ::, Serial0/1/1
L 2001:DB8:ACAD:9::6/128 [0/0]
via ::, Serial0/1/1
L FF00::/8 [0/0]
via ::, Null0
Branch1# show ipv6 route
IPv6 Routing Table - 17 entries
Codes: C - Connected, L - Local, S - Static, R - RIP, B - BGP
U - Per-user Static route, M - MIPv6
I1 - ISIS L1, I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary
O - OSPF intra, OI - OSPF inter, OE1 - OSPF ext 1, OE2 - OSPF ext 2
ON1 - OSPF NSSA ext 1, ON2 - OSPF NSSA ext 2
D - EIGRP, EX - EIGRP external
EX ::/0 [170/7289856]
via FE80::260:3EFF:FE77:E701, Serial0/0/0
D 2001:DB8:ABCD::/127 [90/2681856]
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 15 of 18
via FE80::260:3EFF:FE77:E701, Serial0/0/0
D 2001:DB8:ACAD::/60 [90/2682112]
via FE80::260:3EFF:FE77:E701, Serial0/0/0
D 2001:DB8:ACAD::/61 [90/2682112]
via FE80::260:3EFF:FE77:E701, Serial0/0/0
D 2001:DB8:ACAD::/62 [5/2816]
via ::, Null0
C 2001:DB8:ACAD:1::/64 [0/0]
via ::, GigabitEthernet0/0
L 2001:DB8:ACAD:1:FFFF:FFFF:FFFF:FFFF/128 [0/0]
via ::, GigabitEthernet0/0
C 2001:DB8:ACAD:2::/64 [0/0]
via ::, GigabitEthernet0/1
L 2001:DB8:ACAD:2:FFFF:FFFF:FFFF:FFFF/128 [0/0]
via ::, GigabitEthernet0/1
D 2001:DB8:ACAD:5::/64 [90/2682112]
via FE80::260:3EFF:FE77:E701, Serial0/0/0
D 2001:DB8:ACAD:6::/64 [90/2682112]
via FE80::260:3EFF:FE77:E701, Serial0/0/0
C 2001:DB8:ACAD:9::/127 [0/0]
via ::, Serial0/0/0
L 2001:DB8:ACAD:9::1/128 [0/0]
via ::, Serial0/0/0
D 2001:DB8:ACAD:9::2/127 [90/2681856]
via FE80::260:3EFF:FE77:E701, Serial0/0/0
D 2001:DB8:ACAD:9::4/127 [90/2681856]
via FE80::260:3EFF:FE77:E701, Serial0/0/0
D 2001:DB8:ACAD:9::6/127 [90/2681856]
via FE80::260:3EFF:FE77:E701, Serial0/0/0
L FF00::/8 [0/0]
via ::, Null0
Show IPv6 Protocols
HQ# show ipv6 protocol
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "static
IPv6 Routing Protocol is "eigrp 100"
EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0
EIGRP maximum hopcount 100
EIGRP maximum metric variance 1
Interfaces:
Serial0/0/0
Serial0/0/1
Serial0/1/0
Serial0/1/1
Serial0/2/1
Redistributing: eigrp 100, static
Address Summarization:
2001:DB8:ACAD::/60 for Serial0/2/1
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 18
Maximum path: 16
Distance: internal 90 external 170
Branch1#show ipv6 protocol
IPv6 Routing Protocol is "connected"
IPv6 Routing Protocol is "static
IPv6 Routing Protocol is "eigrp 100"
EIGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0
EIGRP maximum hopcount 100
EIGRP maximum metric variance 1
Interfaces:
GigabitEthernet0/0
GigabitEthernet0/1
Serial0/0/0
Redistributing: eigrp 100
Address Summarization:
2001:DB8:ACAD::/62 for Serial0/0/0
Maximum path: 16
Distance: internal 90 external 170
Show IPv6 EIGRP Topology
HQ# show ipv6 eigrp topology
IPv6-EIGRP Topology Table for AS 100/ID(1.1.1.1)
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - Reply status
P 2001:DB8:ACAD:9::4/127, 1 successors, FD is 2169856
via Connected, Serial0/1/0
P 2001:DB8:ACAD:9::6/127, 1 successors, FD is 2169856
via Connected, Serial0/1/1
P 2001:DB8:ACAD:9::/127, 1 successors, FD is 2169856
via Connected, Serial0/0/0
P 2001:DB8:ACAD:5::/64, 1 successors, FD is 2170112
via FE80::20D:BDFF:FE23:9801 (2170112/2816), Serial0/1/0
P 2001:DB8:ACAD:6::/64, 1 successors, FD is 2170112
via FE80::20D:BDFF:FE23:9801 (2170112/2816), Serial0/1/0
P 2001:DB8:ACAD:9::2/127, 1 successors, FD is 2169856
via Connected, Serial0/0/1
P 2001:DB8:ACAD::/61, 1 successors, FD is 2170112
via FE80::2D0:FFFF:FE73:E101 (2170112/2816), Serial0/0/1
P 2001:DB8:ACAD::/62, 1 successors, FD is 2170112
via FE80::202:17FF:FEE2:A401 (2170112/2816), Serial0/0/0
P 2001:DB8:ACAD::/60, 1 successors, FD is 2169856
via Summary (2169856/0), Null0
P ::/0, 1 successors, FD is 6777856
via Rstatic (6777856/0)
P 2001:DB8:ABCD::/127, 1 successors, FD is 2169856
via Connected, Serial0/2/1
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 17 of 18
Branch1# show ipv6 eigrp topology
IPv6-EIGRP Topology Table for AS 100/ID(2.2.2.2)
Codes: P - Passive, A - Active, U - Update, Q - Query, R - Reply,
r - Reply status
P 2001:DB8:ACAD:1::/64, 1 successors, FD is 2816
via Connected, GigabitEthernet0/0
P 2001:DB8:ACAD:2::/64, 1 successors, FD is 2816
via Connected, GigabitEthernet0/1
P 2001:DB8:ACAD:9::/127, 1 successors, FD is 1340928
via Connected, Serial0/0/0
P 2001:DB8:ACAD::/62, 1 successors, FD is 2816
via Summary (2816/0), Null0
P 2001:DB8:ACAD:9::4/127, 1 successors, FD is 2681856
via FE80::260:3EFF:FE77:E701 (2681856/2169856), Serial0/0/0
P 2001:DB8:ACAD:9::6/127, 1 successors, FD is 2681856
via FE80::260:3EFF:FE77:E701 (2681856/2169856), Serial0/0/0
P 2001:DB8:ACAD:5::/64, 1 successors, FD is 2682112
via FE80::260:3EFF:FE77:E701 (2682112/2170112), Serial0/0/0
P 2001:DB8:ACAD:6::/64, 1 successors, FD is 2682112
via FE80::260:3EFF:FE77:E701 (2682112/2170112), Serial0/0/0
P 2001:DB8:ACAD:9::2/127, 1 successors, FD is 2681856
via FE80::260:3EFF:FE77:E701 (2681856/2169856), Serial0/0/0
P 2001:DB8:ACAD::/61, 1 successors, FD is 2682112
via FE80::260:3EFF:FE77:E701 (2682112/2170112), Serial0/0/0
P 2001:DB8:ACAD::/60, 1 successors, FD is 2682112
via FE80::260:3EFF:FE77:E701 (2682112/2170112), Serial0/0/0
P ::/0, 1 successors, FD is 7289856
via FE80::260:3EFF:FE77:E701 (7289856/6777856), Serial0/0/0
P 2001:DB8:ABCD::/127, 1 successors, FD is 2681856
via FE80::260:3EFF:FE77:E701 (2681856/2169856), Serial0/0/0
Show IPv6 Access Lists
HQ# show ipv6 access-list
IPv6 access list WEB_ACCESS
permit tcp host 2001:DB8:ACAD::1 host 2001:DB8:CAFE:1::3 eq www
permit tcp host 2001:DB8:ACAD::1 host 2001:DB8:CAFE:1::3 eq 443
permit tcp host 2001:DB8:ACAD::3 host 2001:DB8:CAFE:1::3 eq www
permit tcp host 2001:DB8:ACAD::3 host 2001:DB8:CAFE:1::3 eq 443
permit tcp host 2001:DB8:ACAD::5 host 2001:DB8:CAFE:1::3 eq www
permit tcp host 2001:DB8:ACAD::5 host 2001:DB8:CAFE:1::3 eq 443
permit tcp host 2001:DB8:ACAD::7 host 2001:DB8:CAFE:1::3 eq www
permit tcp host 2001:DB8:ACAD::7 host 2001:DB8:CAFE:1::3 eq 443
deny tcp any host 2001:DB8:CAFE:1::3 eq www
deny tcp any host 2001:DB8:CAFE:1::3 eq 443
permit ipv6 any any
EIGRP Capstone Project
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 18
Branch1# show ipv6 access-list
IPv6 access list NO_ACCESS
permit tcp host 2001:DB8:ACAD::1 host 2001:DB8:ACAD:1:FFFF:FFFF:FFFF:FFFF eq
telnet
permit tcp host 2001:DB8:ACAD::2 host 2001:DB8:ACAD:2:FFFF:FFFF:FFFF:FFFF eq
telnet
deny tcp any host 2001:DB8:ACAD:2:FFFF:FFFF:FFFF:FFFF eq telnet
deny tcp any host 2001:DB8:ACAD:1:FFFF:FFFF:FFFF:FFFF eq telnet