1
1) EIGRP OSPF redistribution > i used the command distance eigrp 9 1!
") Po#ic$ %ased Routing > ips and inter&aces 'here di&&erent(
)) IP*+ OSPF ,irtua# -in.
/) OSPF Sim(
1. ( EIGRP Stub Sim )
%$ increasing the &irst distant o&&ice0 1S manu&actures has e2tended their
business( 3he$ con&igured the remote o&&ice router 4R)) &rom 'hich the$ can
reach a## 5orporate subnets(
In order to raise net'or6 stab#eness and #o'er the memor$ usage and 5P7
uti#i8ation to R)0 1S manu&actures ma6es use o& route summari8ation together
'ith the EIGRP Stub Routing &eature(
9nother net'or6 engineer is responsib#e &or the imp#ementing o& this so#ution(
:o'e*er0 in the process o& con&iguring EIGRP stub routing connecti*it$ 'ith the
remote net'or6 de*ices o&& R) has been missing(
Present#$ 1S has con&igured EIGRP on a## routers in the net'or6 R"0 R)0
and R/(
;our dut$ is to &ind and so#*e the connecti*it$ &ai#ure prob#em 'ith the
remote o&&ice router R)(
;ou shou#d then con&igure route summari8ation on#$ to the distant o&&ice
router R) to comp#ete the tas6 a&ter the prob#em has been so#*ed(
3he success o& pings &rom R/ to the R) -9< inter&ace pro*es that the &au#t
has been corrected and the R) IP routing tab#e on#$ contains t'o 1(((
subnets(
"
sho' running=con&ig
R3#configure terminal
R3(config)#router eigrp 123
R3(config-router)#no eigrp stub receive-only
R3(config-router)#eigrp stub
R3(config-router)#end
R3#show ip route
R4enable
R4#configure terminal
R4(config)#interface s!"!
R4(config-if)#ip summary-address eigrp 123 1!#2#!#! 2$$#2$$#!#!
R3#show ip route
R/> cop$ running=con&ig startup=con&ig
????????????????????????????????????????????????????????????????????????
?????????
2. (EIGRP OSPF Redistribution Sim)
)
%n this &uestion you need to redistribute between '()* and +%,R) such that
1-2#1.#1!!#1 is reachable from router R1#
R2 is an /(0R for +%,R) 1!! and '()* /R+/ 24
R3 is an /(0R for +%,R) 1!! and '()* /R+/ 34
1ote2 3here are 34' separate areas on 34' separate /(0R( thus you need to do
redistribution on R2 and R3
R1 is '156 in +%,R) 1!!7 and is 38+ '156 router you can ping from# R4 has a
loopbac9 interface that must be pinged from R1#
R4 is running '()* and has redundant lin9s to +%,R) networ9 over R3 router#
1ote2 6ou should ping from R1 to 1-2#1.#1!!#1 networ9 to ma9e sure everything is
wor9ing correctly#
/
*irst we need to find out $ parameters (0andwidth7 :elay7 Reliability7 5oad7 ;3<) of the s!"!"!
interface (the interface of R2 connected to R4) for redistribution2
R2#show interface s000
4rite down these $ parameters7 notice that we have to divide the :elay by 1! because its metric
unit is tens of microsecond# *or e=ample7 we get 0andwidth>1$44 ?bit7 :elay>2!!!! us7
Reliability>2$$7 5oad>17 ;3<>1$!! bytes then we would redistribute as follows2
R2#confi! termina"
R2(confi!)# router os#f $
R2(confi!%router)# redistribute ei!r# $00 metric%t&#e $ subnets
R2(confi!%router)#e'it
R2(confi!%router)#router ei!r# $00
R2(confi!%router)#redistribute os#f $ metric $()) 2000 2(( $ $(00
R2#co#& runnin!%confi! startu#%confi!
@1otice2 %n fact7 these parameters are Aust used for reference and we can use other parameters
with no problem# /lso7 a candidate said that the simulator didnBt accept the 0andwidth of 1$44C
in that case7 we can use a lower value7 li9e 12D#E
%f the de"a& is 2!!!!us then we need to divide it by 1!7 that is 2!!!! " 1! > 2!!!)
For R* we use the show interface fa00 to !et ( #arameters too
R*#show interface fa00
*or e=ample we get 0andwidth>1!!!! ?bit7 :elay>1!!! us7 Reliability>2$$7 5oad>17
;3<>1$!! bytes
*or e=ample we get 0andwidth>1!!!!! ?bit7 :elay>1!! us7 Reliability>2$$7 5oad>17
;3<>1$!! bytes
R*#confi! termina"
R*(confi!)#router os#f $
R*(confi!%router)#redistribute ei!r# $00 metric%t&#e $ subnets
R*(confi!)#e'it
!
R*(confi!%router)#router ei!r# $00
R*(confi!%router)#redistribute os#f $ metric $00000 $0 2(( $ $(00
R*#co#& runnin!%confi! startu#%confi!
*inally you should try to Fshow ip routeG to see the 1-2#1.#1!!#1 networ9 (the networ9 behind
R4) in the routing table of R1 and ma9e a ping from R1 to this networ9#
May be the copy running-config startup-config command will not work in this lab so do not
worry, just skip it.
*. (Po"ic& +ased Routin! Sim)
Hompany /can has two lin9s which can ta9e it to the %nternet#
3he company policy demands that you use web traffic to be forwarded only to *rame Relay lin9
and other traffic can go through any lin9s that are available#
<se 0,) attributes to solve the re&uested action#
+
9## the :33P tra&&ic &rom the EIGRP <et'or6 shou#d go through Frame Re#a$ #in6 i& a*ai#ab#e
and a## the other tra&&ic shou#d go through either #in6(
3he on#$ router $ou are ab#e to administrate is the %order Router0 &rom the EIGRP <et'or6 $ou
ma$ on#$ send :33P tra&&ic( 9s the other peop#e mentioned0 actua##$ it is not a %GP #ab( ;ou are
not ab#e to e2ecute the command @router bgp +!1A
1) ,ccess "ist that catches the -..P traffic/
+orderRouter(confi!)#access%"ist $0$ #ermit tc# an& an& e0 www
1ote that the server was not directly connected to the 0order Router# 3here were a lot of +%,R)
routes on it# %n the real e=am you do not 9now the e=act %) address of the server in the +%,R)
networ9 so we have to use the source as FanyG to catch all the source addresses#
2) Route ma# that sets the ne't ho# address to be ISP$ and #ermits the rest of the traffic/
+orderRouter(confi!)#route%ma# #br #ermit $0
+orderRouter(confi!%route%ma#)#match i# address $0$
+orderRouter(confi!%route%ma#)#set i# ne't%ho# $0.$.$0$.$ $0.$.$00.2
+orderRouter(confi!%route%ma#)#e'it
+orderRouter(confi!)#route%ma# #br #ermit 20
(1otice2 the route%ma# #br #ermit 20 line allows other traffic than 833) to be routed#
'therwise7 other traffic will be dropped)
2) ,##"& the route%ma# on the interface to the ser1er in the EIGRP 2etwor3/
+orderRouter(confi!%route%ma#)#e'it
+orderRouter(confi!)#int fa00 fa0$
+orderRouter(confi!%if)#i# #o"ic& route%ma# #br
+orderRouter(confi!%if)#e'it
+orderRouter(confi!)#e'it
+orderRouter#co#& runnin!%confi! startu#%confi!
4) 3here is a F8ost for 3estingG7 clic9 on this host to open a bo= in which there is a button named
F,enerate 833) trafficG# Hlic9 on this button to generate some pac9ets for 833) traffic# Iump
bac9 to the 0orderRouter and type the command Fshow route-mapG#
+orderRouter#show route%ma#
%n the output you will see the line F)olicy routing matches2 J pac9etsKG# %t means that the route-
map we configured is wor9ing properly#
B
). (OSPF Sim) 4uestion 252
'()* is configured on routers /mani and 5ynaic#
/maniLs (!"! interface and 5ynaicLs (!"1 interface are in /rea !#
5ynaicLs 5oopbac9! interface is in /rea 2#
6our tas9 is to configure the following2
)ortlandLs (!"! interface in /rea 1/maniLs (!"1 interface in /rea 1
<se the appropriate mas9 such that '156 )ortlandLs (!"! and /mnaniLs (!"1 could be in /rea
1#
/rea 1 should not receive any e=ternal or inter-area routes (e=cept the default route)#
Answer:
C
3he Duestion reDuires that on#$ Port#andEs SF and 9maniEs SF1 cou#d be in 9rea 10 there&ore
'e must use a 'i#dcard o& ((() 4this 'i#dcard is eDui*a#ent 'ith a subnet mas6 o& F)) so that
there are on#$ " IP addresses can participate in area 1 4the$ are 19"(1+C(/(! G 19"(1+C(/(+)(
3he &u## command 'e use here is network [Link] 0.0.0. !re! 1
3he Duestion a#so reDuires that @9rea 1 shou#d not recei*e an$ e2terna# or inter=area routes
4e2cept the de&au#t route)H( Reca## that i& 'e donEt 'ant the router to recei*e e2terna# routes0 'e
ha*e to stop -S9 3$pe !( 9nd i& 'e donEt 'ant to recei*e inter=area routes0 'e ha*e to stop -S9
3$pe ) and 3$pe /( "#ere$ore we #!%e to &on$i'ure !re! 1 !s ! tot!(() stubb) !re!( For $our
in&ormation0 here is the de&inition o& a tota##$ stubb$ areaI
@"ot!(() stubb !re! 3his area does not accept summar$ -S9s &rom other areas 4t$pes ) or /)
or e2terna# summar$ -S9s 43$pe !)( 3$pes )0/ and ! -S9s are rep#aced b$ the 9rea %order
Router49%R) 'ith a de&au#t router( 3ota##$ stubb$ areas protect interna# routers b$ minimi8ing
the routing tab#e and summari8ing e*er$thing outside the area 'ith a de&au#t route(H
In conc#usion0 'e ha*e to con&igure area 1 as a tota##$ stubb$ area( Je do that b$ con&iguring
Port#and as stub and con&iguring 9mani 49%R router) as a stub ? @no=summar$Hsu&&i2(
+ Configure Portland router as a stub:
Port"and#confi!ure termina"
Port"and(confi!)#router os#f $
router os#f 5*
9##o' net'or6 19"(1+C(/(/F) to Koin 9rea 10 notice that $ou ha*e to con*ert subnet mas6 into
'i#dcard mas6
Port"and(confi!%router)#networ3 $52.$67.).) 0.0.0.* area $
networ3 $52.$67.22.( [Link] area $6
5on&igure Port#and as a stubI
Port"and(confi!%router)#area $ stub
area $6 stub
Port"and(confi!%router)#end
Port"and#co#& runnin!%confi! startu#%confi!
+ Configure Amani router as a totally stub:
9
,mani#confi!ure termina"
,mani(confi!)#router os#f $
router os#f 5*
,mani(confi!%router)#networ3 $52.$67.).) 0.0.0.* area $
networ3 $52.$67.22.6 [Link] area $6
La6e area 1 become a tota##$ stubb$ area0 notice that 'e can on#$ use this command on 9%R
routerI
,mani(confi!%router)#area $ stub no%summar&
area $6 stub no%summar&
,mani(confi!%router)#end
,mani#co#& runnin!%confi! startu#%confi!
(. IP16 OSPF 8irtua" 9in3 Sim
/cme is a small e=port company that has an e=isting enterprise networ9 that is running
%)v. '()*v3#
Hurrently '()* is configured on all routers#
8owever7 R4Ls loopbac9 address (*+H!2424) cannot be seen in R1Ls %)v. routing table#
6ou are tas9ed with identifying the cause of this fault and implementing the needed
corrective actions that uses '()* features and does no change the current area
assignments#
6ou will 9now that you have corrected the fault when R4Ls loopbac9 address (*+H!2424)
can ping from R1 to R4 loopbac9 address#
1
3o troub#eshoot the prob#em0 &irst issue the s#ow runnin'*&on$i' on a## o& /
routers( Pa$ more attention to the outputs o& routers R" and R)
3he output o& the @sho' running=con&igH command o& R"I
3he output o& the @sho' running=con&igH command o& R)I
Je 6ne' that a## areas in an Open Shortest Path First 4OSPF) autonomous s$stem must be
ph$sica##$ connected to the bac6bone area 49rea )(
In some cases0 'here this is not possib#e0 'e can use a *irtua# #in6 to connect to the bac6bone
through a non=bac6bone area(
3he area through 'hich $ou con&igure the *irtua# #in6 is 6no'n as a transit area( In this case0 the
area 11 'i## become the transit area(
11
3here&ore0 routers R" and R) must be con&igured 'ith the area area-id *irtua#=#in6 neighbor-
router-id command(
+ ,on$i'ure %irtu!( (ink on R2 ($rom t#e $irst out-ut !bo%e. we (e!rne/
t#!t t#e 0SP1 -ro&ess I2 o$ R2 is 1):
R2:enab"e
R2#confi!ure termina"
R2(confi!)#i#16 router os#f $
R2(confi!%rtr)#area $$ 1irtua"%"in3 *.*.*.*
R2#co#&in! runnin!%confi! startu#%confi!
(1otice that we have to use neighbor router-id 3#3#3#37 not R2Ms router-id 2#2#2#2)
; <onfi!ure 1irtua" "in3 on R* (from the second out#ut abo1e= we "earned that the OSPF
#rocess I> of R* is $ and we ha1e to disab"e the wron! confi!uration of ?area () 1irtua"%
"in3 ).).).)@)/
R*:enab"e
R*#confi!ure termina"
R*(confi!)#i#16 router os#f $
R*(confi!%rtr)#no area () 1irtua"%"in3 ).).).)
R*(confi!%rtr)#area $$ 1irtua"%"in3 [Link]
R*#co#&in! runnin!%confi! startu#%confi!
4e should chec9 the configuration on R42
R):enab"e
R)#show runnin!%confi!
NN6ou will see a wrongly configured virtual-lin9 command# 3o get full mar9 we have to disable
this command2
R)#confi!ure termina"
R)(confi!)#i#16 router os#f $
R)(confi!%rtr)#no area () 1irtua"%"in3 *.*.*.*
R)#co#&in! runnin!%confi! startu#%confi!
/fter finishing the configuration donBt forget to ping between R1 and R4 to ma9e sure they wor9
wellO
%t is weird that we canBt ping the %)v. loopbac9 interface of R4 (with the ping or ping ipv.
command) but we can chec9 by using the command show ipv. route on R1
1"
NN #show i#16 route on R1
OSPF -ots#ot
Puestion
3he company and the company networ9 have both been growing rapidly#
;ultiple adds7 moves and changes have been applied to the networ9#
6our boss has as9ed you to troubleshoot a recent '()* synchroniQation problem that has arisen#
3here have been synchroniQation problems at separate locations in the '()* area !#
3here have been reported lin9 failures during the rapid growth of the company networ9#
6ou are re&uired to resolve the '()* problem# '()* must be able to converge when the
networ9 changes#
1)
Re&er to the in&ormation abo*e to ans'er the &o##o'ing /
DuestionsI
Muestion 1
E2amine the &o##o'ing e2cerpt &rom the @sho' ip osp&H command on N1I
,rea +,<A+O2E (0)
1umber of interfaces in the this area is 1
/rea has no authentication
()* algorithm last e=ecuted !!2!!231#2D! ago
()* algorithm e=ecuted $ times
/rea ranges are
1umber of 5(/ 13# Hhec9sum (um !=1.*!*:
1umber of opa&ue lin9 5(/ !# Hhec9sum (um !R!!!!!!
1umber of :Hbitless 5(/ !
1umber of indication 5(/ !
1umber of :o1ot/ge 5(/ !
*lood list length !
,rea $6
1umber of interfaces in this area is 2
/rea has message digest authentication
()* algorithm last e=ecuted !!2!!234#J2D ago
()* algorithm e=ecuted - times
/rea ranges are
1umber of 5(/ $# Hhec9sum (um !=!2*H:3
1umber of opa&ue lin9 5(/ !# Hhec9sum (um !R!!!!!!
1umber of :Hbitless 5(/ !
1umber of indication 5(/ !
1umber of :o1ot/ge 5(/ !
*lood list length !
1/
0ased on the information shown above7 what is most li9ely causing the different missing routes
throughout the networ9S
/# /rea 1. is configured with authentication#
0# /rea 1. has been configured to use the same interfaces as /rea !#
H# /rea ! and /rea 32 have been configured with mismatched 5(/ numbers#
:# /rea 1. has been configured as a total stub networ9
+# /rea 1. has been configured as a stub networ9
F. ,rea 0 is disconti!uous.
,# 1one of the above
/nswer2 *
+=planation
*rom the topology7 we see :1 has 2 interfaces belong to /rea !7 that are interfaces *a!"1 T
*a!"2 but the output says there is only one interface in /rea ! (1umber of interfaces in the this
area is 1)# 3herefore we can deduce that a lin9 in area ! was down and area ! is discontiguous#
Muestion "
4hich configuration command on :1 (with a similar command on :2) will provide an
immediate solution to the missing route problemS
/# no area 1. stub
0# no area 1. authentication message-digest
<. area $6 1irtua"%"in3 7.$7B.$B(.72
:# area 1. virtual-lin9 1-2#1.#4#2
+# no area 1. stub no-summary
*# networ9 1-2#1.#!#!#!#!#2$$#2$$ area 1.
,# 1one of the above
9ns'erI 5
E'#"anation
3o fi= this problem immediately without changing the topology we need to create virtual lin9
between :1 T :2# %f you are still confused how to use the virtual lin97 chec9 out the %)v. '()*
Uirtual 5in9 (im article#
Muestion )
1!
3he log of d1 reports the following2
V5%1+)R'3'-$-<):'412 5ine protocol on %nterface *ast+thernet!"17 changed state to down
V5%1?-3-<):'412 %nterface *ast+thernet!"17 changed state to down
V'()*-$-/:IH8,2 )rocess 17 1br D#1D-#1-$#D2"32 on *asst+thernet!"1 from *<55 to :'417
1eighbor :own2 %nterface down or detached
3his event was anticipated due to maintenanceC however7 it resulted in e=cessive lost routes#
4hich route should be the only one removed from the routing tables of the routersS
/# D#1D-#1-$#D2"32
0# 1!#13D#43#!"3!
H# 1!#2!.#1D!#!"3!
:# 4#24J#113#$J"32
E. $0.20$.0.0*0
*# 1one of the above
9ns'erI E
E'#"anation
*rom the log we learn that the lin9 of %nterface *a!"1 has been down# 3his lin9 belongs to
networ9 1!#2!1#!#!"3! so we Aust need to remove this route from the routing table#
Puestion 4
3he R2 router has lost connectivity to R1# 3he following is R1Ms current route table2
1-2#1.#!#!"1. is variably subnetted7 3 subnets7 2 mas9s
' %/ 1-2#1.#23!#!"24 @11!"21E via 1!#13D#43#17 !!2!!2!37 *ast+thernet!"!
' %/ 1-2#1.#2!J#!"24 @11!"22E via 1!#13D#43#17 !!2!!2!37 *ast+thernet!"!
' %/ 1-2#1.#1#!"3! @11!"21E via 1!#13D#43#17 !!2!!2!37 *ast+thernet!"!
1!#!#!#!"3! is subnetted7 1 subnets
H 1!#13D#43#! is directly connected7 *ast+thernet!"!
4hich e=pected route is missing from R1Ms route table based on the topology during the
maintenance periodSB
/# o 1-2#1.#!#! @11!"2E via 1!#13D#43#17 !!2!!2!J7 *ast+thernet!"!
0# o %/ J#1$2#1!$#122 @11!"3E via 1!#13D#43#17 !!2!!2!J7 *ast+thernet!"!
1+
H# o %/ 1!#13D#!#! @11!"3E via 1!#13D#43#17 !!2!!2!J7 *ast+thernet!"!
:# o %/ 1!#24J#!#! @11!"2E via 1!#13D#43#17 !!2!!2!J7 *ast+thernet!"!
+# o %/ 4#24J#113#$J @11!"2E via 1!#13D#43#17 !!2!!2!J7 *ast+thernet!"!
*. o 7.$7B.$B(.72 C$$0*D 1ia $0.$*7.)*.$= 00/00/05= FastEthernet00
G. O $0.206.$70.0*0 C$$0*D 1ia $0.$*7.)*.$= 00/00/05= FastEthernet00
8# ' %/ 1!#2!.#1D!#!"3! @11!"3E via 1!#13D#43#17 !!2!!2!J7 *ast+thernet!"!
9ns'erI FFG
E3-(!n!tion
;ou can see there are " options &or the net'or6 bet'een N" and R"( One 'ith @I9H and one
'ithout( O OSPF0 I9 OSPF inter area(
%e&ore #in6 &ai#ures bet'een N1 and N" the net'or6 1("+(1C(F) has been appearing as
@intra areaH net'or6 in R1Os routing tab#e(
%ecause the$ 'ere in the same 9rea (
So the correct ans'er shou#d be
P( O 1("+(1C(F) Q11F)R *ia 1(1)C(/)(10 II90 FastEthernetFAH