Hacking Cisco: September 2012

Wednesday, September 26, 2012

Lab 190 - RIPng Prefix Summarization

Prerequisites: CCNP level skills.

Topology

Notice!

In order to proceed to the next lab you must first complete all the previous labs (from lab 188 onwards).

Pic1. Layer3 Topology Diagram.

Click the picture to enlarge it.

Task 1

Configure IPv6 addresses between SW2 and BB2 as follows:

SW2 (Vlan 208): 2001:0:0:D0::8/64
BB2 (Fa0/0): 2001:0:0:D0::FE/64

Task 2
In BB2 configure four loopbacks using the following addresses:

Loopback 0: 2001:2:2:0::1/64
Loopback 1: 2001:2:2:1::1/64
Loopback 2: 2001:2:2:2::1/64
Loopback 3: 2001:2:2:3::1/64

Task 3

Enable RIPng with the identifier 'CCIE' between SW2 and BB2. Ensure that SW2 advertises only one learned from BB2. All other RIPng devices should be able to reach more specific prefixes advertised by BB2.

Solution

Task 1

Configure IPv6 addresses between SW2 and BB2 as follows:

SW2 (Vlan 208): 2001:0:0:D0::8/64
BB2 (Fa0/0): 2001:0:0:D0::FE/64

SW2 Config:
!
ipv6 unicast-routing
!
interface Vlan208
ip address 198.18.100.8 255.255.255.0
ipv6 address 2001:0:0:D0::8/64

BB2 Config:

ipv6 unicast-routing

interface FastEthernet0/0

ip address 198.18.100.254 255.255.255.0

speed 100

full-duplex

ipv6 address 2001:0:0:D0::FE/64

Task 2
In BB2 configure four loopbacks using the following addresses:

Loopback 0: 2001:2:2:0::1/64
Loopback 1: 2001:2:2:1::1/64
Loopback 2: 2001:2:2:2::1/64
Loopback 3: 2001:2:2:3::1/64

BB2 Config:

!
int Loopback 0
ipv6 address 2001:2:2:0::1/64
!
int Loopback 1
ipv6 address 2001:2:2:1::1/64
!
int Loopback 2
ipv6 address 2001:2:2:2::1/64
!
int Loopback 3
ipv6 address 2001:2:2:3::1/64
!

Task 3

SW2 Config:

interface Vlan208

ip address 198.18.100.8 255.255.255.0

ipv6 address 2001:0:0:D0::8/64

ipv6 rip CCIE enable

BB2 Config:

interface FastEthernet0/0

ip address 198.18.100.254 255.255.255.0

speed 100

full-duplex

ipv6 address 2001:0:0:D0::FE/64

ipv6 rip CCIE enable

ipv6 rip CCIE summary-address 2001:2:2::/62

interface Loopback0

no ip address

ipv6 address 2001:2:2::1/64

ipv6 rip CCIE enable

interface Loopback1

no ip address

ipv6 address 2001:2:2:1::1/64

ipv6 rip CCIE enable

interface Loopback2

no ip address

ipv6 address 2001:2:2:2::1/64

ipv6 rip CCIE enable

interface Loopback3

no ip address

ipv6 address 2001:2:2:3::1/64

ipv6 rip CCIE enable

Verification:

Pic. 02 - Summary Prefix.

Pic. 03 - Ping Test.

Lab 189 - IPv6 Address Auto-Configuration

Prerequisites: CCNP level skills.

Topology

Pic2. Layer3 Topology Diagram.

Click the picture to enlarge it.

Task 1

Ensure, that you have configured previous lab correctly (lab 188). Configure SW1, SW2 and R5 such that they automatically configure their IPv6 addresses in Vlans 27 and Vlans 215.

Task 2

Enable RIPng with the identifier 'CCIE' in SW1, SW2 and R5. Verify that SW1 can reach all the hosts in VLAN 215.

Notice!
In order to proceed to the next lab you must first complete all the previous labs (from lab 188 onwards).

Solution

Task 1

Ensure, that you have configured previous lab correctly (lab 188). Configure SW1, SW2 and R5 such that they automatically configure their IPv6 addresses in Vlans 27 and Vlans 215.

SW1 Config:

!
ipv6 unicast-routing

interface Vlan27

ip address 172.16.27.7 255.255.255.0

ipv6 address autoconfig

SW2 Config:

ipv6 unicast-routing

interface Vlan215

ip address 172.16.215.8 255.255.255.0

ipv6 address autoconfig

R5 Config:

ipv6 unicast-routing

interface FastEthernet0/1

ip address 172.16.215.5 255.255.255.0

speed 100

full-duplex

ipv6 address autoconfig

Using 'debug ipv6 nd' and 'debug ipv6 packet detail' inspect what happens when you enable autoconfig.

Task 2

Enable RIPng with the identifier 'CCIE' in SW1, SW2 and R5. Verify that SW1 can reach all the hosts in VLAN 215.

SW1 Config:
!
interface Vlan27
ip address 172.16.27.7 255.255.255.0
ipv6 address autoconfig
ipv6 rip CCIE enable

SW2 Config:

interface Vlan215

ip address 172.16.215.8 255.255.255.0

ipv6 address autoconfig
ipv6 rip CCIE enable

R5 Config:
!
interface FastEthernet0/1
ip address 172.16.215.5 255.255.255.0
speed 100
full-duplex
ipv6 address autoconfig
ipv6 rip CCIE enable

Saturday, September 22, 2012

Lab 188 - RIPng Basic Configuration

Prerequisites: CCNP level skills.

Topology

Pic2. Layer3 Topology Diagram.

Click the picture to enlarge it.

Task 1

Configure IPv6 network addresses as follows:

R1's FastEthernet0/1 = 2001:0:0:D7::/64
R2's FastEthernet0/0 = 2001:0:0:1B::/64

Ensure that the host id is created automatically (off of a router's MAC address)

Task 2

Enable RIPng with the identifier 'CCIE' allowing traffic between Vlan 27 and Vlan 215. Ensure that R1 and R2 can ping their respective Vlans using router's host names as well. Assume there is no IPv6 DNS server in the network.

Solution

Lunch break at work and I am playing in the lab. How geeky am I?

Task 1

Configure IPv6 network addresses as follows:

R1's FastEthernet0/1 = 2001:0:0:D7::/64
R2's FastEthernet0/0 = 2001:0:0:1B::/64

Ensure that the host id is created automatically (off of a router's MAC address)

R1 Config:
!
interface FastEthernet0/1
ip address 172.16.215.1 255.255.255.0
speed 100
full-duplex
ipv6 address 2001:0:0:D7::/64 eui-64

R2 Config:
!
interface FastEthernet0/0
ip address 172.16.27.2 255.255.255.0
speed 100
full-duplex
ipv6 address 2001:0:0:1B::/64 eui-64

Task 2

R1 Config:
!
ipv6 unicast-routing
!
ipv6 router rip CCIE
!

interface Serial0/0
ip address 172.16.123.1 255.255.255.0
encapsulation frame-relay
ipv6 address FE80::1 link-local
ipv6 address 2001:0:0:123::1/64
ipv6 rip CCIE enable
clock rate 2000000
frame-relay map ip 172.16.123.2 102 broadcast
frame-relay map ipv6 2001:0:0:123::2 102
frame-relay map ipv6 FE80::2 102 broadcast
no frame-relay inverse-arp

R2 Config:

!
ipv6 unicast-routing
!
ipv6 router rip CCIE
!
interface Serial0/0
ip address 172.16.123.2 255.255.255.0
encapsulation frame-relay
ipv6 address FE80::2 link-local
ipv6 address 2001:0:0:123::2/64
ipv6 rip CCIE enable
clock rate 2000000
frame-relay map ip 172.16.123.3 203 broadcast
frame-relay map ip 172.16.123.2 201
frame-relay map ip 172.16.123.1 201 broadcast
frame-relay map ipv6 2001:0:0:123::1 201
frame-relay map ipv6 FE80::1 201 broadcast
no frame-relay inverse-arp

interface FastEthernet0/0

ip address 172.16.27.2 255.255.255.0

speed 100

full-duplex

ipv6 address 2001:0:0:1B::/64 eui-64

ipv6 rip CCIE enable

Notice!

You don't have to enable RIPng process in the global config mode. You can enable it directly on the interface(es) instead. The global process will start automatically.

In order to ping the routers by their names without DNS service, you must create ip host mappings (hosts). Your IPv6 addresses will be different than mine here:

R2's Fa0/0 IPv6 address = 2001::1B:C001:AFF:FE16:0

R1's Fa0/1 IPv6 address = 2001::D7:C000:AFF:FE16:1

R1 Config:

ipv6 host R2 2001::1B:C001:AFF:FE16:0

R2 Config:

ipv6 host R1 2001::D7:C000:AFF:FE16:1

Verification:

#show hosts

Ping works!

Tuesday, September 18, 2012

Lab 187 - IPv6 On Frame-Relay Links

Prerequisites: CCNP level skills.

Topology

Pic2. Layer3 Topology Diagram.

Click the picture to enlarge it.

Task 1

You plan on using IPv6 in your network. As an experiment, you want to enable dual stack on Frame-Relay enabled links between R1, and R2 which will support RIPng protocol. Below are the addresses you should use:

R1 Serial0/0:
link local address = FE80::1
Globally aggregatable address: 2001:0:0:123::1/64

R2 Serial0/0:
link local address = FE80::2
Globally aggregatable address: 2001:0:0:123::2/64

Task 2
Ensure basic layer 3 connectivity and make sure that RIPng will be able to exchange updates using Frame-Relay interfaces.

Solution

R1 Config:
!
ipv6 unicast-routing
!
interface Serial0/0
ip address 172.16.123.1 255.255.255.0
encapsulation frame-relay
ipv6 address FE80::1 link-local
ipv6 address 2001:0:0:123::1/64
clock rate 2000000
frame-relay map ipv6 FE80::2 102 broadcast
frame-relay map ipv6 2001:0:0:123::2 102
frame-relay map ip 172.16.123.2 102 broadcast
no frame-relay inverse-arp
!

R2 Config:
!
ipv6 unicast-routing
!
interface Serial0/0
ip address 172.16.123.2 255.255.255.0
encapsulation frame-relay
ipv6 address FE80::2 link-local
ipv6 address 2001:0:0:123::2/64
clock rate 2000000
frame-relay map ipv6 FE80::1 201 broadcast
frame-relay map ipv6 2001:0:0:123::1 201
frame-relay map ip 172.16.123.1 201 broadcast
frame-relay map ip 172.16.123.2 201
frame-relay map ip 172.16.123.3 203 broadcast
no frame-relay inverse-arp
!

Monday, September 17, 2012

Lab 186 - Creating IPv6 Topology

Prerequisites: CCNP level skills.

Topology

The most boring part is changing the topology every now and then just to illustrate the problem. In order to avoid doing this over and over again, let's use the same physical topology I have used in the Kill Switch section.

The logical configuration used from now on, will be the same I have used in Green Sash: OSPF sub-section. We have only one life and it is better if we spend it on doing something interesting.

Pic1. Layer2 Topology Diagram.

Pic2. Layer3 Topology Diagram.

Click the picture to enlarge it.

Task 1

Using the physical topology diagram presented here, configure devices as per pic.1 and pic.2 (if you want to save the time, you can download the configurations from here and upload it).

Task 2
Test layer 3 connectivity between all neighboring devices.

Task 3
Get ready for the upcoming IPv6 labs ;).

Friday, September 7, 2012

Hacking Cisco - Lab List

Disclaimer

The author of the posts will not assume any liability or responsibility to any person or entity with respect to loss or damages incurred from information contained in this blog. Any resemblance to some other training materials and/or CCIE exam is completely coincidental.

Last Update: 7, September 2012

Lab 180 - MPLS Internet Access (as VPN): Solution!

Hello.

My name is Jarek Rek (first name pronounced like: 'Yarek'). I would like to welcome you to my Cisco Routing blog. I try to develop my skills in the area of linux, routing and switching as well as programming every day. I am greatly inspired by open source movement and the content of this site partly reflects my attitude towards life and people. I believe that through hard work, honing the skills, sharing and helping one another, amazing things can happen. If you are now laughing at my naivete, consider the contributions made by Linus Torvalds and thousands of hackers who shared their expertise with us.

Anyway, if you want to tag along and study with me you are most welcome. I will be very happy to hear from you. If you want to drop me a line you will find my contact details in 'about me' section.

Thank you for visiting my blog. I wish you all the best with your personal goals.
Enjoy the labs.

Version 0.1 (draft)

Cisco Routing and Switching (mini) Challenges