>CCIE Lab 3

Posted by

>

UPDATE (11/3/09): Here is a link to the dynamips/dynagen network file.



IGP
  • ·      Configure routers in AS1021 to use OSPF area 0. ASBR-6 and ASBR-5 should be able to ping the other router’s, in AS1021, loopback0 address.
  • ·      Configure routers in AS455 to use IS-IS level-2 routes. Routers 1,2,3 and 4 should be able the ping the other routers’, in AS455, loopback0 addresses.
  • ·      The link between ASBR-6 and ASBR-5 should be configured to eliminate the DR/BDR election process. 

BGP
  • ·      Configure an eBGP session between ASBR-1 and ASBR-6 as well as between ASBR-4 and ASBR-5.
  • ·      Advertise the loopback addresses of routers in AS 455 to AS 1021 from both ASBR-1 and ASBR-4. Do NOT use redistribution on ASBR-1 or ASBR-4 to accomplish this and only advertise the loopback addresses.
  • ·      Advertise the loopback addresses of routers in AS 1021 to AS 455 from both ASBR-5 and ASBR-6. ONLY use redistribution on ASBR-5 and ASBR-6 to accomplish this and only advertise the loopback addresses.
  • ·      Configure iBGP sessions on all routers in AS455 with ASBR-1 as a RR.
  • ·      Configure iBGP between ASBR-6 and ASBR-5.
  • ·      Traffic from AS 455 to AS 1021 should prefer the ASBR-1 to ASBR-6 link.
  • ·      Traffic from AS 1021 to AS 455 should prefer the ASBR-6 to ASBR-1 link.
  • ·      All non-CE routers should be able to ping the loopback of all other non-CE routers after this configuration.

MPLS
  • ·      Configure all routers in AS 455 for label switching using TDP for a label advertisement protocol.
  • ·      Configure all routers in AS 1021 for label switching using LDP for a label advertisement protocol.
  • PE-CE routing
  • ·      Configure EIGRP for vrf CustA on PE-3, PE-2, and CE-7. Both PE-3 and PE-2 should have CE-7’s loopback address in its vrf routing table after this.
  • ·      Verify this using the ping command.
  • ·      Configure RIP between ASBR-5 and CE-8 in vrf CustA. ASBR-5 should have CE-8’s loopback address in its routing table after this.
  • ·      Verify this using the ping command.

IntraAS VPN
  • ·      Configure an L3VPN using MP-BGP between PE-2 and PE-3 for vrf CustA.
  • ·      Configure loopback addresses on PE-2 and PE-3 in vrf CustA. Use 10.1.1.2/32 and 10.1.1.3/32 respectively. Configure EIGRP accordingly.
  • ·      Verify that CE-7 will use the VPN connection to reach these loopbacks in the event of a link failure on CE-7.

MPLS-TE
  • ·      Enable MPLS-TE throughout AS 455.
  • ·      Create a tunnel with the highest priority possible between PE-3 and PE-2 such that all L3VPN traffic between the two routers takes the PE-3, ASBR-4, ASBR-1, PE-2 (and vice-versa) path on the network. Also, this tunnel should reserve 15 Mbps of bandwidth.
  • ·      Verify the operation of this tunnel.

InterAS VPN
  • ·      Configure a L3VPN session between PE-3 and ASBR-5 for vrf CustA. The only VPNv4 session should be between these two routers. Only CE-7 and CE-8 loopback addresses should be shared.
  • ·      Configure the network to support this LSP.
  • ·      If the link between ASBR-4 and ASBR-5 fails, the VPN should still operate through the ASBR-1 and ASBR-6 link.
  • ·      Verify connectivity between CE-7 and CE-8.

Multicast
  • ·      Configure AS 455 and AS 1021 to support multicast traffic. This includes SSM and pim sparse-mode.  In AS 455 ASBR-4 will act as the rendezvous point. In AS 1021 ASBR-5 will act as the rendezvous point.
  • ·      Verify the operation of multicast traffic on both networks.

InterAS Multicast
  • ·      Using MSDP between ASBR-4 and ASBR-5 configure InterAS multicast support between AS 455 and AS 1021.
  • ·      Multicast traffic should be able to flow between the two networks.

Multicast VPN
  • ·      Configure the L3VPN between PE-2, PE-3, and ASBR-5 to support multicast across the VPN.
Advertisements

One comment

  1. >You are going to have to come up with your own addressing between the ASBR's. I forgot to put the subnets in the diagram.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s