CCIE Practical Studies, Volume I

Timed Portion

Lab Rules

• No static routes or floating static routes are used unless specifically stated.

• Follow the instructions exactly. Be careful to propagate routes only where and when instructed. Use the PVCs only as directed by the instructions.

• Primary configurations might need to be modified for Part II only when you are finished with the primary configurations.

• You can use the configuration guides and the Cisco Documentation CD-ROM for your only reference material.

• You have 8 1/2 hours to complete the lab. Do not talk to anyone during this phase.

• It is recommended that you read the entire lab before beginning.

• Make an accurate and precise network illustration.

• Use Figure 18-2 as a reference for the physical layout of the lab.

  Figure 18-2. Network Diagram for "Skynet"

Section I: Basic IP Configuration

1. Access server: Configure the access server/router so that all the routers and the switches can be accessed through reverse Telnet. Password-protect all routers and switches with the password cisco.

2. IP address assignment: Assign an IP addresses to all physical interfaces as denoted in Figure 18-2. Use the major network of 140.100. x.x on all interfaces. Use a 24-bit mask on all interfaces except for the following:

   R1: Allow for 30 host addresses on the Token Ring interface. Use a 30-bit address on the PPP and Frame link between R1 and R4.

   R2: Use an IP address of 192.128.128.2/24 on the Ethernet interface. Assign a 30-bit subnet to the HDLC link between R2/R5.

   R3: Configure the IPX network DEAD on a loopback interface.

   R4: Use a 27-bit mask on the Token Ring interface. Configure 18-10 loopback interfaces; use the IP addresses of 199.199.1.1/24 to 199.199.10.1/24.

   Figure 18-10. Network Diagram for "The Unnamed lab"

   R5: Configure the Token Ring to support 14 hosts . Configure three loopback addresses, with the IP addresses of 151.100.1.1/24, 151.101.1.1/24, and 172.16.1.1/24. Assign a 30-bit subnet to the HDLC link between R2/R5.

   R6: Assign the IP address of 10.10.10.1/24 to the Ethernet interface on VLAN 2. Full IP and IPX connectivity to all Ethernet, Token Ring, and loopback interfaces will be expected unless noted.

3. Document the network thoroughly; include all OSPF areas, IP/IPX address, IPX networks, and so on.

Section II: Catalyst/LAN Configuration

1. Configure the VLANs as depicted in Figure 18-2. Configure the Token Ring segments, and connect R2 to the backbone routers Ethernet segment.

Section III: OSPF and Frame Relay Configuration

1. Configure the Frame Relay network as shown in Figure 18-2. You may use subinterfaces only on R1. Use only the DLCIs shown in the diagram to route traffic. Traffic from R2 to R3 should all go through R1.

2. R1, R2, and R3 should share the same IP subnet. Configure OSPF Area 0 between the routers; do not use the ip ospf network command when configuring OSPF. Configure the Frame link between R1 and R4 to also be in OSPF Area 0.

3. Configure the PPP link between R1 and R4 to be in OSPF Area 10. Ring 2 is in OSPF Area 20. This link should become active only upon a loss of Frame service.

4. Change the OSPF hello time on the serial link of R3 so that hellos are broadcast every 60 seconds.

5. Advertise the 10 loopback addresses on R4, 199.199.1.1 to 199.199.10.1, through OSPF without assigning an area to them.

Section IV: Routing Protocols and Redistribution

1. Configure IGRP on VLAN 1 on R3/R6, and Ring 3 on R6 only. Do not allow IGRP broadcast onto VLAN 2.

2. Configure RIP 2 on R2 going to the backbone router. Configure R2 to send and receive only version II updates to and from the backbone router.

3. Prevent the subnet of the Token Ring network on R4 from reaching R7.

4. Configure EIGRP on the HDLC link between R2/R5. Configure EIGRP on Ring 4 of R5. Use 2020 as the Autonomous System ID.

5. Summarize the loopback networks of 151.100.1.1 and 151.101.1.1 into one advertisement. Ensure that R6 can ping all EIGRP networks, without adding a static route.

Section V: IPX Configuration

1. Configure IPX NLSP on R5's Ring 4 and on R2.

2. Configure IPX RIP/SAP on all LAN interfaces only.

3. Configure IPX EIGRP on the Frame Relay WAN links.

4. Apply a static SAP to R6 that is three hops away out its Token Ring interface. The SAP offers print services and should be configured as such.

5. Prevent R3 from propagating this SAP across the WAN.

6. R3 should have a loopback interface configured with the IPX network DEAD; prevent only R4 from receiving this route.

Section VI: Bridging

1. Transparently bridge SNA from VLAN 1 to VLAN 3/Backbone 1, across the Frame Relay network.

2. Force the selection of ROOT bridge to go to R1.

Section VII: MISC IOS Configuration

1. Configure CHAP authentication on the PPP link between R1 and R4. Use ccie as the password.

2. Apply an inbound filter to R5, filtering just the even subnets from the loopback range 199.199.1.1 to 199.199.10.1 on R4.

3. Apply an inbound traffic filter to R6 so that only routing protocols, ping s, and WWW can enter the router and have access to the WWW hosts on Ring 3 and VLAN 2.

4. The user skynet resides on R1. Allow this user access to all IP services on Ring 3 and VLAN 2. This access should be valid for only 10 minutes.