Teknologisk videncenter - User contributions [en]

CoE Cluster november 2011/Dell Cluster installation

2011-11-11T10:05:29Z

Pederrs: /* Etherchannels til SAN */

=Hardware=
Each group installs Ubuntu 10.10 32 bit on four Dell PowerEdge 1750 bladeserver with 36,5GB harddisk.
==Rack==
Position in Rack
#Common Switch for all groups
#Head node Group 1
#Node 1 Group 1
#Node 2 Group 1
#Node 3 Group 1
#Head node Group 2
#Node 1 Group 2
#Node 2 Group 2
#Node 3 Group 2
#Head node Group 3
#Node 1 Group 3
#Node 2 Group 3
#Node 3 Group 3
===Switch configuration===
#Group 1 VLAN 10 port 1 to 5
#Group 2 VLAN 20 port 6 to 10
#Group 3 VLAN 30 port 11 to 15
#Common VLAN 40 port 16 to 24 - Connected to 192.168.139.0/24 net

==Filesystem==
*'''/''' filesystem 2 GB primary
*'''/tmp''' filesystem 5 GB logical
*'''/var''' filesystem 5 GB primary
*'''/usr''' filesystem 6 GB logical
*'''swap''' filesystem 2 GB logical
*'''/home''' filesystem remaining space
==Updating Ubuntu==

=Update=
<source lang=cli>
sudo bash
apt-get update
apt-get upgrade
</source>
=List installed packages=
==Number of installed packages==
<source lang=cli>
root@newclusterh:~# <input>dpkg --get-selections | wc -l</input>
962
</source>
==Searching installed packages==
<source lang=cli>
root@newclusterh:~# <input>dpkg --get-selections | grep nfs</input>
libnfsidmap2 install
nfs-common install
nfs-kernel-server install
root@newclusterh:~# <input>dpkg -L nfs-common</input>
/.
/etc
/etc/init.d
/etc/init
/etc/init/statd.conf
/etc/init/statd-mounting.conf
/etc/init/rpc_pipefs.conf
/etc/init/gssd.conf
<notice>...OUTPUT OMITTED...</notice>
</source>
=Routing IPv4 and NAT-ing=
==Configuring additional NIC's==
[[Image:DellCluster.png|right|thumb|300px|Setup: Group 1 shown in example]]
*Cluster networks between Headnode and Nodes.
**Group 1: 10.100.1.0/24
**Group 2: 10.100.2.0/24
**Group 3: 10.100.3.0/24
*Headnode public IP address
**Group 1: 192.168.139.21
**Group 2: 192.168.139.22
**Group 3: 192.168.139.23
**Switch: 192.168.139.24
*Cluster SAN networks between Nodes and SAN.
**Group 1: 10.101.1.0/24
**Group 2: 10.102.2.0/24
**Group 3: 10.103.3.0/24

edit the file '''/etc/network/interfaces'''. Example below
<source lang=cli>
auto eth0
iface eth0 inet static
address 192.168.139.50
netmask 255.255.255.0
gateway 192.168.139.1
network 192.168.139.0
broadcast 192.168.139.255

auto eth1
iface eth1 inet static
address 10.0.0.1
netmask 255.255.255.0
</source>

=Head node=
==Routing IPv4==
*Add or uncomment the line '''net.ipv4.ip_forward=1''' in '''/etc/sysctl.conf''' to allow Routing after boot
*Issue the command '''sysctl -w net.ipv4.ip_forward=1''' to allow routing in flight.

==NAT with iptables==
<source lang=cli>
#!/bin/bash
#
# Start firewall
#
# Tillader ping indefra og ud.
# Lukker for al anden trafik.
# Diverse erklæringer
FW=iptables
INT_NET="10.0.0.0/24"
EXT_NET="172.16.4.0/24"
EXT_IP="172.16.4.99"
EXT_IF="eth0"

# Fjern alle tidligere regler
$FW -F INPUT
$FW -F OUTPUT
$FW -F FORWARD
$FW -F -t nat

# Sæt default politik til afvisning
$FW -P FORWARD ACCEPT

# Tillad ping indefra
$FW -A FORWARD -s $INT_NET -p icmp --icmp-type echo-request -j ACCEPT

# Tillad pong udefra
$FW -A FORWARD -d $INT_NET -p icmp --icmp-type echo-reply -j ACCEPT

# Source NAT på udgående pakker
$FW -t nat -A POSTROUTING -o $EXT_IF -s $INT_NET -j SNAT --to-source $EXT_IP
</source>
==NFS server==
install NFS package
<source lang=cli>
root@headnode:~# <input>apt-get install nfs-kernel-server</input>
</source>
Add export to '''/etc/export''' (Group 1 net shown)
<source lang=cli>
/home 10.100.1.0/24(rw,sync,no_subtree_check,no_root_squash)
</source>
Restart the NFS-Server
<source lang=cli>
root@headnode:~# <input>/etc/init.d/nfs-kernel-server restart</input>
</source>
=Node clients=
==NFS client==
Install NFS client package
<source lang=cli>
root@node1:~# <input>apt-get install nfs-common</input>
</source>
===Mounting /home from headnode===
First change the nodes own '''/home''' partition to '''/home2'''
<source lang=cli>
mkdir /home2
</source>
Change '''/etc/fstab''' to mount the local '''/home''' partition on the new '''/home2''' directory. (See below)
<source lang=cli>
UUID=d3bdcead-df52-d5ba7df3a1e4 /home2 ext4 defaults 0 2
</source>
Add a line to '''/etc/fstab''' to mount the headnodes '''/home''' on the local nodes directory '''/home'''
<source lang=cli>
10.100.3.1:/home /home nfs rw<notice>,vers=3</notice> 0 0
</source>
==/etc/hosts==
Add machines to '''/etc/hosts''' for example
<source lang=cli>
10.100.3.1 head3
10.100.3.31 node31
10.100.3.32 node32
10.100.3.33 node33
</source>
=Auto login=
To login from '''ssh''' without password between the machines in the cluster. Issue the following commands from the headnode.
<source lang=cli>
su -c "ssh-keygen" <notice>USERNAME</notice>
cat /home/<notice>USERNAME</notice>/.ssh/id_rsa.pub > /home/<notice>USERNAME</notice>/.ssh/authorized_keys
chown <notice>USERNAME</notice>:<notice>USERNAME</notice> /home/<notice>USERNAME</notice>/.ssh/authorized_keys
</source>

=Running processes on CPU's=
Use '''mpstat -P ALL''' to see current utilization of CPU's. See the CPU mask of any given process with '''taskset -p <PID>'''. With '''taskset'' it's possible to change the CPU mask of running processes and start commands on any given CPU or allow a range of CPU's the process can run on.

The Linux Scheduler decides which processes runs on which CPU's. See '''man sched_setscheduler'''.
=SAN på Compute Nodes=
Install a [[SAN]] in the backend of the compute nodes. For example [[FreeNAS]]
==Networks==
*Cluster networks between SAN and Nodes.
**Group 1: 10.101.1.0/24
**Group 2: 10.101.2.0/24
**Group 3: 10.101.3.0/24
*SAN switch 10.101.2.254 password cisco

=SETI=
Search for Extraterrestrial Intelligence [http://setiathome.berkeley.edu/index.php (SETI)]
<source lang=cli>
apt-get install boinc-client
boinc --attach_project http://setiathome.berkeley.edu 33161_02b5e31a4c4d32c2f158f08fa423601b
</source>
Der går ca. en halv times tid før software og de første data er downloadet.
{{Source cli}}
[[Category:CoE]][[Category:Linux]]

=iSCSI med Windows Server og Linux klient=
Video der beskriver opsætning af et iSCSI target på en Windows 2008 R2 Server:
http://technet.microsoft.com/en-us/edge/Video/ff710316

Følgende program skal bruges på Windows 2008 R2 Server:
http://www.microsoft.com/download/en/details.aspx?id=19867

For at sætte en iSCSI initiater op på Ubuntu 10.10 kan følgende guide bruges:
http://www.howtoforge.com/using-iscsi-on-ubuntu-10.04-initiator-and-target

===Etherchannels til SAN===
Når der skal sættes et SAN op kan det være en ide at bruge etherchannels for at opnå så høj båndbredde som mulig. Her er guides til hvordan dette sættes op i VMware og Ubuntu:

VMware:
http://www.sysadmintutorials.com/tutorials/vmware-vsphere-4/vcenter4/network-teaming-with-cisco-etherchannel/

Ubuntu:
https://help.ubuntu.com/community/LinkAggregation

CoE Cluster november 2011/Dell Cluster installation

2011-11-11T10:05:04Z

Pederrs: /* iSCSI med Windows Server og Linux klient */

=Hardware=
Each group installs Ubuntu 10.10 32 bit on four Dell PowerEdge 1750 bladeserver with 36,5GB harddisk.
==Rack==
Position in Rack
#Common Switch for all groups
#Head node Group 1
#Node 1 Group 1
#Node 2 Group 1
#Node 3 Group 1
#Head node Group 2
#Node 1 Group 2
#Node 2 Group 2
#Node 3 Group 2
#Head node Group 3
#Node 1 Group 3
#Node 2 Group 3
#Node 3 Group 3
===Switch configuration===
#Group 1 VLAN 10 port 1 to 5
#Group 2 VLAN 20 port 6 to 10
#Group 3 VLAN 30 port 11 to 15
#Common VLAN 40 port 16 to 24 - Connected to 192.168.139.0/24 net

==Filesystem==
*'''/''' filesystem 2 GB primary
*'''/tmp''' filesystem 5 GB logical
*'''/var''' filesystem 5 GB primary
*'''/usr''' filesystem 6 GB logical
*'''swap''' filesystem 2 GB logical
*'''/home''' filesystem remaining space
==Updating Ubuntu==

=Update=
<source lang=cli>
sudo bash
apt-get update
apt-get upgrade
</source>
=List installed packages=
==Number of installed packages==
<source lang=cli>
root@newclusterh:~# <input>dpkg --get-selections | wc -l</input>
962
</source>
==Searching installed packages==
<source lang=cli>
root@newclusterh:~# <input>dpkg --get-selections | grep nfs</input>
libnfsidmap2 install
nfs-common install
nfs-kernel-server install
root@newclusterh:~# <input>dpkg -L nfs-common</input>
/.
/etc
/etc/init.d
/etc/init
/etc/init/statd.conf
/etc/init/statd-mounting.conf
/etc/init/rpc_pipefs.conf
/etc/init/gssd.conf
<notice>...OUTPUT OMITTED...</notice>
</source>
=Routing IPv4 and NAT-ing=
==Configuring additional NIC's==
[[Image:DellCluster.png|right|thumb|300px|Setup: Group 1 shown in example]]
*Cluster networks between Headnode and Nodes.
**Group 1: 10.100.1.0/24
**Group 2: 10.100.2.0/24
**Group 3: 10.100.3.0/24
*Headnode public IP address
**Group 1: 192.168.139.21
**Group 2: 192.168.139.22
**Group 3: 192.168.139.23
**Switch: 192.168.139.24
*Cluster SAN networks between Nodes and SAN.
**Group 1: 10.101.1.0/24
**Group 2: 10.102.2.0/24
**Group 3: 10.103.3.0/24

edit the file '''/etc/network/interfaces'''. Example below
<source lang=cli>
auto eth0
iface eth0 inet static
address 192.168.139.50
netmask 255.255.255.0
gateway 192.168.139.1
network 192.168.139.0
broadcast 192.168.139.255

auto eth1
iface eth1 inet static
address 10.0.0.1
netmask 255.255.255.0
</source>

=Head node=
==Routing IPv4==
*Add or uncomment the line '''net.ipv4.ip_forward=1''' in '''/etc/sysctl.conf''' to allow Routing after boot
*Issue the command '''sysctl -w net.ipv4.ip_forward=1''' to allow routing in flight.

==NAT with iptables==
<source lang=cli>
#!/bin/bash
#
# Start firewall
#
# Tillader ping indefra og ud.
# Lukker for al anden trafik.
# Diverse erklæringer
FW=iptables
INT_NET="10.0.0.0/24"
EXT_NET="172.16.4.0/24"
EXT_IP="172.16.4.99"
EXT_IF="eth0"

# Fjern alle tidligere regler
$FW -F INPUT
$FW -F OUTPUT
$FW -F FORWARD
$FW -F -t nat

# Sæt default politik til afvisning
$FW -P FORWARD ACCEPT

# Tillad ping indefra
$FW -A FORWARD -s $INT_NET -p icmp --icmp-type echo-request -j ACCEPT

# Tillad pong udefra
$FW -A FORWARD -d $INT_NET -p icmp --icmp-type echo-reply -j ACCEPT

# Source NAT på udgående pakker
$FW -t nat -A POSTROUTING -o $EXT_IF -s $INT_NET -j SNAT --to-source $EXT_IP
</source>
==NFS server==
install NFS package
<source lang=cli>
root@headnode:~# <input>apt-get install nfs-kernel-server</input>
</source>
Add export to '''/etc/export''' (Group 1 net shown)
<source lang=cli>
/home 10.100.1.0/24(rw,sync,no_subtree_check,no_root_squash)
</source>
Restart the NFS-Server
<source lang=cli>
root@headnode:~# <input>/etc/init.d/nfs-kernel-server restart</input>
</source>
=Node clients=
==NFS client==
Install NFS client package
<source lang=cli>
root@node1:~# <input>apt-get install nfs-common</input>
</source>
===Mounting /home from headnode===
First change the nodes own '''/home''' partition to '''/home2'''
<source lang=cli>
mkdir /home2
</source>
Change '''/etc/fstab''' to mount the local '''/home''' partition on the new '''/home2''' directory. (See below)
<source lang=cli>
UUID=d3bdcead-df52-d5ba7df3a1e4 /home2 ext4 defaults 0 2
</source>
Add a line to '''/etc/fstab''' to mount the headnodes '''/home''' on the local nodes directory '''/home'''
<source lang=cli>
10.100.3.1:/home /home nfs rw<notice>,vers=3</notice> 0 0
</source>
==/etc/hosts==
Add machines to '''/etc/hosts''' for example
<source lang=cli>
10.100.3.1 head3
10.100.3.31 node31
10.100.3.32 node32
10.100.3.33 node33
</source>
=Auto login=
To login from '''ssh''' without password between the machines in the cluster. Issue the following commands from the headnode.
<source lang=cli>
su -c "ssh-keygen" <notice>USERNAME</notice>
cat /home/<notice>USERNAME</notice>/.ssh/id_rsa.pub > /home/<notice>USERNAME</notice>/.ssh/authorized_keys
chown <notice>USERNAME</notice>:<notice>USERNAME</notice> /home/<notice>USERNAME</notice>/.ssh/authorized_keys
</source>

=Running processes on CPU's=
Use '''mpstat -P ALL''' to see current utilization of CPU's. See the CPU mask of any given process with '''taskset -p <PID>'''. With '''taskset'' it's possible to change the CPU mask of running processes and start commands on any given CPU or allow a range of CPU's the process can run on.

The Linux Scheduler decides which processes runs on which CPU's. See '''man sched_setscheduler'''.
=SAN på Compute Nodes=
Install a [[SAN]] in the backend of the compute nodes. For example [[FreeNAS]]
==Networks==
*Cluster networks between SAN and Nodes.
**Group 1: 10.101.1.0/24
**Group 2: 10.101.2.0/24
**Group 3: 10.101.3.0/24
*SAN switch 10.101.2.254 password cisco

=SETI=
Search for Extraterrestrial Intelligence [http://setiathome.berkeley.edu/index.php (SETI)]
<source lang=cli>
apt-get install boinc-client
boinc --attach_project http://setiathome.berkeley.edu 33161_02b5e31a4c4d32c2f158f08fa423601b
</source>
Der går ca. en halv times tid før software og de første data er downloadet.
{{Source cli}}
[[Category:CoE]][[Category:Linux]]

=iSCSI med Windows Server og Linux klient=
Video der beskriver opsætning af et iSCSI target på en Windows 2008 R2 Server:
http://technet.microsoft.com/en-us/edge/Video/ff710316

Følgende program skal bruges på Windows 2008 R2 Server:
http://www.microsoft.com/download/en/details.aspx?id=19867

For at sætte en iSCSI initiater op på Ubuntu 10.10 kan følgende guide bruges:
http://www.howtoforge.com/using-iscsi-on-ubuntu-10.04-initiator-and-target

==Etherchannels til SAN==
Når der skal sættes et SAN op kan det være en ide at bruge etherchannels for at opnå så høj båndbredde som mulig. Her er guides til hvordan dette sættes op i VMware og Ubuntu:

VMware:
http://www.sysadmintutorials.com/tutorials/vmware-vsphere-4/vcenter4/network-teaming-with-cisco-etherchannel/

Ubuntu:
https://help.ubuntu.com/community/LinkAggregation

CoE Cluster november 2011/Dell Cluster installation

2011-11-11T10:03:15Z

Pederrs:

=Hardware=
Each group installs Ubuntu 10.10 32 bit on four Dell PowerEdge 1750 bladeserver with 36,5GB harddisk.
==Rack==
Position in Rack
#Common Switch for all groups
#Head node Group 1
#Node 1 Group 1
#Node 2 Group 1
#Node 3 Group 1
#Head node Group 2
#Node 1 Group 2
#Node 2 Group 2
#Node 3 Group 2
#Head node Group 3
#Node 1 Group 3
#Node 2 Group 3
#Node 3 Group 3
===Switch configuration===
#Group 1 VLAN 10 port 1 to 5
#Group 2 VLAN 20 port 6 to 10
#Group 3 VLAN 30 port 11 to 15
#Common VLAN 40 port 16 to 24 - Connected to 192.168.139.0/24 net

==Filesystem==
*'''/''' filesystem 2 GB primary
*'''/tmp''' filesystem 5 GB logical
*'''/var''' filesystem 5 GB primary
*'''/usr''' filesystem 6 GB logical
*'''swap''' filesystem 2 GB logical
*'''/home''' filesystem remaining space
==Updating Ubuntu==

=Update=
<source lang=cli>
sudo bash
apt-get update
apt-get upgrade
</source>
=List installed packages=
==Number of installed packages==
<source lang=cli>
root@newclusterh:~# <input>dpkg --get-selections | wc -l</input>
962
</source>
==Searching installed packages==
<source lang=cli>
root@newclusterh:~# <input>dpkg --get-selections | grep nfs</input>
libnfsidmap2 install
nfs-common install
nfs-kernel-server install
root@newclusterh:~# <input>dpkg -L nfs-common</input>
/.
/etc
/etc/init.d
/etc/init
/etc/init/statd.conf
/etc/init/statd-mounting.conf
/etc/init/rpc_pipefs.conf
/etc/init/gssd.conf
<notice>...OUTPUT OMITTED...</notice>
</source>
=Routing IPv4 and NAT-ing=
==Configuring additional NIC's==
[[Image:DellCluster.png|right|thumb|300px|Setup: Group 1 shown in example]]
*Cluster networks between Headnode and Nodes.
**Group 1: 10.100.1.0/24
**Group 2: 10.100.2.0/24
**Group 3: 10.100.3.0/24
*Headnode public IP address
**Group 1: 192.168.139.21
**Group 2: 192.168.139.22
**Group 3: 192.168.139.23
**Switch: 192.168.139.24
*Cluster SAN networks between Nodes and SAN.
**Group 1: 10.101.1.0/24
**Group 2: 10.102.2.0/24
**Group 3: 10.103.3.0/24

edit the file '''/etc/network/interfaces'''. Example below
<source lang=cli>
auto eth0
iface eth0 inet static
address 192.168.139.50
netmask 255.255.255.0
gateway 192.168.139.1
network 192.168.139.0
broadcast 192.168.139.255

auto eth1
iface eth1 inet static
address 10.0.0.1
netmask 255.255.255.0
</source>

=Head node=
==Routing IPv4==
*Add or uncomment the line '''net.ipv4.ip_forward=1''' in '''/etc/sysctl.conf''' to allow Routing after boot
*Issue the command '''sysctl -w net.ipv4.ip_forward=1''' to allow routing in flight.

==NAT with iptables==
<source lang=cli>
#!/bin/bash
#
# Start firewall
#
# Tillader ping indefra og ud.
# Lukker for al anden trafik.
# Diverse erklæringer
FW=iptables
INT_NET="10.0.0.0/24"
EXT_NET="172.16.4.0/24"
EXT_IP="172.16.4.99"
EXT_IF="eth0"

# Fjern alle tidligere regler
$FW -F INPUT
$FW -F OUTPUT
$FW -F FORWARD
$FW -F -t nat

# Sæt default politik til afvisning
$FW -P FORWARD ACCEPT

# Tillad ping indefra
$FW -A FORWARD -s $INT_NET -p icmp --icmp-type echo-request -j ACCEPT

# Tillad pong udefra
$FW -A FORWARD -d $INT_NET -p icmp --icmp-type echo-reply -j ACCEPT

# Source NAT på udgående pakker
$FW -t nat -A POSTROUTING -o $EXT_IF -s $INT_NET -j SNAT --to-source $EXT_IP
</source>
==NFS server==
install NFS package
<source lang=cli>
root@headnode:~# <input>apt-get install nfs-kernel-server</input>
</source>
Add export to '''/etc/export''' (Group 1 net shown)
<source lang=cli>
/home 10.100.1.0/24(rw,sync,no_subtree_check,no_root_squash)
</source>
Restart the NFS-Server
<source lang=cli>
root@headnode:~# <input>/etc/init.d/nfs-kernel-server restart</input>
</source>
=Node clients=
==NFS client==
Install NFS client package
<source lang=cli>
root@node1:~# <input>apt-get install nfs-common</input>
</source>
===Mounting /home from headnode===
First change the nodes own '''/home''' partition to '''/home2'''
<source lang=cli>
mkdir /home2
</source>
Change '''/etc/fstab''' to mount the local '''/home''' partition on the new '''/home2''' directory. (See below)
<source lang=cli>
UUID=d3bdcead-df52-d5ba7df3a1e4 /home2 ext4 defaults 0 2
</source>
Add a line to '''/etc/fstab''' to mount the headnodes '''/home''' on the local nodes directory '''/home'''
<source lang=cli>
10.100.3.1:/home /home nfs rw<notice>,vers=3</notice> 0 0
</source>
==/etc/hosts==
Add machines to '''/etc/hosts''' for example
<source lang=cli>
10.100.3.1 head3
10.100.3.31 node31
10.100.3.32 node32
10.100.3.33 node33
</source>
=Auto login=
To login from '''ssh''' without password between the machines in the cluster. Issue the following commands from the headnode.
<source lang=cli>
su -c "ssh-keygen" <notice>USERNAME</notice>
cat /home/<notice>USERNAME</notice>/.ssh/id_rsa.pub > /home/<notice>USERNAME</notice>/.ssh/authorized_keys
chown <notice>USERNAME</notice>:<notice>USERNAME</notice> /home/<notice>USERNAME</notice>/.ssh/authorized_keys
</source>

=Running processes on CPU's=
Use '''mpstat -P ALL''' to see current utilization of CPU's. See the CPU mask of any given process with '''taskset -p <PID>'''. With '''taskset'' it's possible to change the CPU mask of running processes and start commands on any given CPU or allow a range of CPU's the process can run on.

The Linux Scheduler decides which processes runs on which CPU's. See '''man sched_setscheduler'''.
=SAN på Compute Nodes=
Install a [[SAN]] in the backend of the compute nodes. For example [[FreeNAS]]
==Networks==
*Cluster networks between SAN and Nodes.
**Group 1: 10.101.1.0/24
**Group 2: 10.101.2.0/24
**Group 3: 10.101.3.0/24
*SAN switch 10.101.2.254 password cisco

=SETI=
Search for Extraterrestrial Intelligence [http://setiathome.berkeley.edu/index.php (SETI)]
<source lang=cli>
apt-get install boinc-client
boinc --attach_project http://setiathome.berkeley.edu 33161_02b5e31a4c4d32c2f158f08fa423601b
</source>
Der går ca. en halv times tid før software og de første data er downloadet.
{{Source cli}}
[[Category:CoE]][[Category:Linux]]

=iSCSI med Windows Server og Linux klient=
Video der beskriver opsætning af et iSCSI target på en Windows 2008 R2 Server:
http://technet.microsoft.com/en-us/edge/Video/ff710316

Følgende program skal bruges på Windows 2008 R2 Server:
http://www.microsoft.com/download/en/details.aspx?id=19867

For at sætte en iSCSI initiater op på Ubuntu 10.10 kan følgende guide bruges:
http://www.howtoforge.com/using-iscsi-on-ubuntu-10.04-initiator-and-target

Når der skal sættes et SAN op kan det være en ide at bruge etherchannels for at opnå så høj båndbredde som mulig. Her er guides til hvordan dette sættes op i VMware og Ubuntu:

VMware:
http://www.sysadmintutorials.com/tutorials/vmware-vsphere-4/vcenter4/network-teaming-with-cisco-etherchannel/

Ubuntu:
https://help.ubuntu.com/community/LinkAggregation

DT4H - Valgfag - MPLS VPN, ESXi

2010-09-16T12:00:43Z

Pederrs: /* Beskrivelse */

=Valgfagsopgave DT4H=

==Beskrivelse==

[[Image:MPLS VPN Opgave - Tegning.png]]

==Serveropsætning==

==Config af netværksudstyr==

===R1 - MPLS Distribution Router===
<source lang=cli>
hostname R1
!
ip cef
!
ip vrf office
rd 100:20
route-target export 100:20
route-target import 100:20
!
ip vrf production
rd 100:10
route-target export 100:10
route-target import 100:10
!
interface Loopback0
ip address 10.0.1.1 255.255.255.252
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.2 255.255.255.252
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip vrf forwarding production
ip address 172.16.1.1 255.255.255.0
ip helper-address 172.30.1.2
ip helper-address 172.30.1.3
!
interface FastEthernet0/1.20
encapsulation dot1Q 20
ip vrf forwarding office
ip address 172.17.1.1 255.255.255.0
ip helper-address 172.30.1.2
ip helper-address 172.30.1.3
!
router isis
net 49.0001.0100.0000.1001.00
is-type level-2-only
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 100
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community both
exit-address-family
!
address-family ipv4 vrf production
redistribute connected
redistribute static
no synchronization
exit-address-family
!
address-family ipv4 vrf office
redistribute connected
redistribute static
no synchronization
exit-address-family
!
mpls ldp router-id Loopback0 force
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</source>

{{Source cli}}

===R2 - MPLS Core/BGP Route Reflector===
<pre>
Current configuration : 2660 bytes
!
! Last configuration change at 11:25:52 UTC Thu Sep 2 2010
! NVRAM config last updated at 11:25:55 UTC Thu Sep 2 2010
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$LRU5$0kkpPs9LoTyrNTUHVjU5L1
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.2.1 255.255.255.252
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.1 255.255.255.252
ip router isis
duplex auto
speed auto
mpls label protocol both
mpls ip
!
interface FastEthernet0/1
ip address 10.0.0.5 255.255.255.252
ip router isis
duplex auto
speed auto
mpls label protocol both
mpls ip
!
interface FastEthernet0/3/0
switchport access vlan 40
!
interface FastEthernet0/3/1
!
interface FastEthernet0/3/2
!
interface FastEthernet0/3/3
switchport access vlan 30
!
interface Serial0/2/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Vlan1
no ip address
!
interface Vlan30
ip address 10.0.0.9 255.255.255.252
ip router isis
mpls label protocol both
mpls ip
!
interface Vlan40
ip address 10.0.0.13 255.255.255.252
ip router isis
mpls label protocol both
mpls ip
!
router isis
net 49.0001.0100.0000.2001.00
is-type level-2-only
!
router bgp 100
bgp log-neighbor-changes
neighbor 10.0.1.1 remote-as 100
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.1 remote-as 100
neighbor 10.0.3.1 update-source Loopback0
neighbor 10.0.4.1 remote-as 100
neighbor 10.0.4.1 update-source Loopback0
neighbor 10.0.5.1 remote-as 100
neighbor 10.0.5.1 update-source Loopback0
!
address-family ipv4
neighbor 10.0.1.1 activate
neighbor 10.0.3.1 activate
neighbor 10.0.4.1 activate
neighbor 10.0.5.1 activate
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.1.1 route-reflector-client
neighbor 10.0.3.1 activate
neighbor 10.0.3.1 send-community extended
neighbor 10.0.3.1 route-reflector-client
neighbor 10.0.4.1 activate
neighbor 10.0.4.1 send-community extended
neighbor 10.0.4.1 route-reflector-client
neighbor 10.0.5.1 activate
neighbor 10.0.5.1 send-community extended
neighbor 10.0.5.1 route-reflector-client
exit-address-family
!
!
!
ip http server
no ip http secure-server
!
!
!
!
mpls ldp router-id Loopback0 force
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end
</pre>

===R3 - MPLS Distribution Router===
<pre>
Current configuration : 2263 bytes
!
! Last configuration change at 12:34:09 UTC Thu Sep 2 2010
! NVRAM config last updated at 12:34:09 UTC Thu Sep 2 2010
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$VCOF$SoSJO1g5dUHduhZ3qLQtZ1
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
ip vrf office
rd 100:20
route-target export 100:20
route-target import 100:20
!
ip vrf production
rd 100:10
route-target export 100:10
route-target import 100:10
!
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.3.1 255.255.255.252
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.6 255.255.255.252
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip vrf forwarding production
ip address 172.16.2.1 255.255.255.0
ip helper-address 172.30.1.2
ip helper-address 172.30.1.3
!
interface FastEthernet0/1.20
encapsulation dot1Q 20
ip vrf forwarding office
ip address 172.17.2.1 255.255.255.0
ip helper-address 172.30.1.2
ip helper-address 172.30.1.3
!
interface Serial0/1/0
no ip address
shutdown
clock rate 125000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/3/0
no ip address
shutdown
clock rate 2000000
!
router isis
net 49.0001.0100.0000.3001.00
is-type level-2-only
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 100
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community both
exit-address-family
!
address-family ipv4 vrf production
redistribute connected
redistribute static
no synchronization
exit-address-family
!
address-family ipv4 vrf office
redistribute connected
redistribute static
no synchronization
exit-address-family
!
!
!
ip http server
no ip http secure-server
!
!
!
!
mpls ldp router-id Loopback0 force
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end
</pre>

===R4 - MPLS Distribution Router/Server Router===
<pre>
Current configuration : 1794 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$tMv4$/qNEMbkDuH90GdXj.V2Kc/
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip vrf server
rd 100:30
route-target export 100:30
route-target export 100:10
route-target export 100:20
route-target import 100:30
route-target import 100:10
route-target import 100:20
!
ip audit po max-events 100
tag-switching tdp router-id Loopback0 force
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.4.1 255.255.255.252
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.10 255.255.255.252
ip router isis
duplex auto
speed auto
tag-switching ip
!
interface Serial0/0
no ip address
shutdown
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.30
encapsulation dot1Q 30
ip vrf forwarding server
ip address 172.30.1.1 255.255.255.0
no snmp trap link-status
!
interface Serial0/1
no ip address
shutdown
!
router isis
net 49.0001.0100.0000.4001.00
is-type level-2-only
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 100
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community both
exit-address-family
!
address-family ipv4 vrf server
redistribute connected
redistribute static
no auto-summary
no synchronization
exit-address-family
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end
</pre>

===R5 - MPLS Edge Router/Internet Router (VRF internet)===
<pre>
Current configuration : 2203 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$ZDel$DkGMj693div2QL9M7xIUk1
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip vrf internet
rd 100:40
route-target export 100:40
route-target export 100:10
route-target export 100:20
route-target export 100:30
route-target import 100:40
route-target import 100:10
route-target import 100:20
route-target import 100:30
!
ip audit po max-events 100
tag-switching tdp router-id Loopback0 force
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.5.1 255.255.255.255
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.14 255.255.255.252
ip nat inside
ip router isis
duplex auto
speed auto
tag-switching ip
!
interface Serial0/0
no ip address
shutdown
!
interface FastEthernet0/1
ip vrf forwarding internet
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router isis
net 49.0001.0100.0000.0005.00
is-type level-2-only
default-information originate
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 100
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community both
exit-address-family
!
address-family ipv4 vrf internet
redistribute connected
redistribute static
no auto-summary
no synchronization
network 0.0.0.0
exit-address-family
!
ip nat inside source list 100 interface FastEthernet0/1 vrf internet overload
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
ip route vrf internet 0.0.0.0 0.0.0.0 192.168.139.1
!
no ip http server
no ip http secure-server
!
access-list 100 permit ip 172.16.0.0 0.0.255.255 any
access-list 100 permit ip 172.17.0.0 0.0.255.255 any
access-list 100 permit ip 172.30.0.0 0.0.255.255 any
access-list 100 permit ip 10.0.0.0 0.0.255.255 any
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end
</pre>
===R6===
<pre>
Current configuration : 4861 bytes
!
! Last configuration change at 14:26:19 eu Thu Sep 16 2010 by cisco
! NVRAM config last updated at 14:26:19 eu Thu Sep 16 2010 by cisco
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$OICl$vWjK8PWfk1AGlAU4jrj2x0
!
aaa new-model
!
!
aaa authentication login default local none
aaa authentication login VPN_BRUGER_AUTH local
aaa authorization network default local
aaa authorization network VPN_GRUPPE_AUTH local
!
aaa session-id common
!
resource policy
!
clock timezone eu 1
clock summer-time eu recurring
ip cef
!
!
!
!
ip vrf EasyVPN
rd 100:50
route-target export 100:50
route-target import 100:50
!
ip vrf SiteToSiteVPN
rd 100:60
route-target export 100:60
route-target import 100:60
!
ip vrf office
rd 100:20
route-target export 100:20
route-target import 100:20
!
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
username cisco password 0 cisco
!
!
crypto keyring SiteToSiteKey vrf SiteToSiteVPN
pre-shared-key address 192.168.139.16 key cisco
!
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 5
lifetime 3600
!
crypto isakmp policy 2
encr 3des
authentication pre-share
group 2
lifetime 3600
!
crypto isakmp client configuration group EASYVPN_GRUPPE
key cisco
pool VPNPOOL
acl 100
netmask 255.255.255.0
crypto isakmp profile ISAKMP_PROFILE_EASYVPN
match identity group EASYVPN_GRUPPE
client authentication list VPN_BRUGER_AUTH
isakmp authorization list VPN_GRUPPE_AUTH
client configuration address respond
client configuration group EASYVPN_GRUPPE
virtual-template 1
!
!
crypto ipsec transform-set mytrans esp-aes 256 esp-sha-hmac
crypto ipsec transform-set EASYVPN_TRANS esp-3des esp-sha-hmac
!
crypto ipsec profile IPSEC_PROFILE_EASYVPN
set transform-set EASYVPN_TRANS
set isakmp-profile ISAKMP_PROFILE_EASYVPN
!
crypto ipsec profile IPSecProfile
set transform-set mytrans
!
!
!
!
!
!
!
!
!
!
!
interface Tunnel1
ip address 10.0.0.21 255.255.255.252
ip mtu 1400
ip router isis
mpls label protocol both
mpls ip
tunnel source Vlan500
tunnel destination 192.168.139.16
tunnel vrf SiteToSiteVPN
tunnel protection ipsec profile IPSecProfile
!
interface Loopback0
ip address 10.0.6.1 255.255.255.255
ip router isis
!
interface Loopback1
ip address 172.17.100.1 255.255.255.255
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.18 255.255.255.252
ip router isis
duplex auto
speed auto
mpls label protocol both
mpls ip
!
interface FastEthernet0/1
ip vrf forwarding EasyVPN
ip address 192.168.139.14 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/3/0
switchport access vlan 500
!
interface FastEthernet0/3/1
!
interface FastEthernet0/3/2
!
interface FastEthernet0/3/3
switchport access vlan 1000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
interface Virtual-Template1 type tunnel
ip vrf forwarding EasyVPN
ip unnumbered FastEthernet0/1
tunnel mode ipsec ipv4
tunnel protection ipsec profile IPSEC_PROFILE_EASYVPN
!
interface Vlan1
no ip address
shutdown
!
interface Vlan500
ip vrf forwarding SiteToSiteVPN
ip address 192.168.139.15 255.255.255.0
!
interface Vlan1000
ip address 13.13.13.1 255.255.255.0
!
router isis
net 49.0001.0100.0000.6001.00
is-type level-2-only
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 100
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community both
exit-address-family
!
address-family ipv4 vrf office
no synchronization
exit-address-family
!
address-family ipv4 vrf SiteToSiteVPN
no synchronization
exit-address-family
!
address-family ipv4 vrf EasyVPN
no synchronization
exit-address-family
!
ip local pool VPNPOOL 172.17.200.1 172.17.200.254
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
ip route vrf EasyVPN 0.0.0.0 0.0.0.0 192.168.139.1
ip route vrf SiteToSiteVPN 0.0.0.0 0.0.0.0 192.168.139.1
!
!
ip http server
no ip http secure-server
!
access-list 100 permit ip 172.17.0.0 0.0.255.255 any
!
!
!
mpls ldp router-id Loopback0 force
!
!
tftp-server flash:phone/7940-7960/P00308000500.bin
tftp-server flash:/phone/7940-7960/P00308000500.bin alias P00308000500.bin
!
control-plane
!
!
!
!
!
!
!
!
!
!
telephony-service
no auto-reg-ephone
load 7960-7940 P00308000500
max-ephones 20
max-dn 150
ip source-address 172.17.100.1 port 2000
max-conferences 4 gain -6
transfer-system full-consult
secondary-dialtone 0
create cnf-files version-stamp 7960 Sep 16 2010 12:25:14
!
!
ephone-dn 11 dual-line
number 10
name Cisco Lort
!
!
line con 0
line aux 0
line vty 0 4
password cisco
!
scheduler allocate 20000 1000
ntp server vrf office 77.233.251.101 prefer
end
</pre>

===SW1 - End-user Access Switch (VRF office/production)===
<pre>
Current configuration : 2601 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$BQq8$0/6FBbzY4eOyLJOHEf4gl1
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 172.16.1.2 255.255.255.0
!
interface Vlan20
ip address 172.17.1.2 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
login
!
end

</pre>

===SW2 - End-user Access Switch (VRF office/production)===
<pre>
Current configuration : 2601 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$C64C$Bm2YkIFSRpTgC/BVV1oXc0
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 172.16.2.2 255.255.255.0
!
interface Vlan20
ip address 172.17.2.2 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
login
!
end
</pre>

===ServerSW - Server Access Switch (VRF server)===
<pre>
Current configuration : 3274 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname ServerSW
!
enable secret 5 $1$B30/$JKJWthWIIR1hyLISuAO490
!
ip subnet-zero
!
spanning-tree extend system-id
!
!
interface FastEthernet0/1
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/2
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/3
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/19
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/24
switchport mode trunk
no ip address
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan30
ip address 172.30.1.200 255.255.255.0
no ip route-cache
!
ip http server
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
login
!
end
</pre>
[[Category:Network]]

File:MPLS VPN Opgave - Tegning.png

2010-09-16T12:00:10Z

Pederrs:

DT4H - Valgfag - MPLS VPN, ESXi

2010-09-03T07:18:31Z

Pederrs: /* Beskrivelse */

=Valgfagsopgave DT4H=

==Beskrivelse==

[[Image:MPLS VPN.png]]

==Serveropsætning==

==Config af netværksudstyr==

===R1 - MPLS Distribution Router===
<pre>
Current configuration : 2414 bytes
!
! Last configuration change at 13:30:04 UTC Thu Sep 2 2010
! NVRAM config last updated at 07:50:08 UTC Fri Sep 3 2010
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$JxID$6PA92U1Z5MfQZu5OMKsD61
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
ip vrf office
rd 100:20
route-target export 100:20
route-target import 100:20
!
ip vrf production
rd 100:10
route-target export 100:10
route-target import 100:10
!
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.1.1 255.255.255.252
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.2 255.255.255.252
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip vrf forwarding production
ip address 172.16.1.1 255.255.255.0
ip helper-address 172.30.1.2
ip helper-address 172.30.1.3
!
interface FastEthernet0/1.20
encapsulation dot1Q 20
ip vrf forwarding office
ip address 172.17.1.1 255.255.255.0
ip helper-address 172.30.1.2
ip helper-address 172.30.1.3
!
interface Serial0/1/0
no ip address
shutdown
no fair-queue
clock rate 125000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/3/0
no ip address
shutdown
clock rate 125000
!
interface Serial0/3/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.0001.0100.0000.1001.00
is-type level-2-only
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 100
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community both
exit-address-family
!
address-family ipv4 vrf production
redistribute connected
redistribute static
no synchronization
exit-address-family
!
address-family ipv4 vrf office
redistribute connected
redistribute static
no synchronization
exit-address-family
!
!
!
ip http server
no ip http secure-server
!
!
!
!
mpls ldp router-id Loopback0 force
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end
</pre>

===R2 - MPLS Core/BGP Route Reflector===
<pre>
Current configuration : 2660 bytes
!
! Last configuration change at 11:25:52 UTC Thu Sep 2 2010
! NVRAM config last updated at 11:25:55 UTC Thu Sep 2 2010
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$LRU5$0kkpPs9LoTyrNTUHVjU5L1
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.2.1 255.255.255.252
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.1 255.255.255.252
ip router isis
duplex auto
speed auto
mpls label protocol both
mpls ip
!
interface FastEthernet0/1
ip address 10.0.0.5 255.255.255.252
ip router isis
duplex auto
speed auto
mpls label protocol both
mpls ip
!
interface FastEthernet0/3/0
switchport access vlan 40
!
interface FastEthernet0/3/1
!
interface FastEthernet0/3/2
!
interface FastEthernet0/3/3
switchport access vlan 30
!
interface Serial0/2/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Vlan1
no ip address
!
interface Vlan30
ip address 10.0.0.9 255.255.255.252
ip router isis
mpls label protocol both
mpls ip
!
interface Vlan40
ip address 10.0.0.13 255.255.255.252
ip router isis
mpls label protocol both
mpls ip
!
router isis
net 49.0001.0100.0000.2001.00
is-type level-2-only
!
router bgp 100
bgp log-neighbor-changes
neighbor 10.0.1.1 remote-as 100
neighbor 10.0.1.1 update-source Loopback0
neighbor 10.0.3.1 remote-as 100
neighbor 10.0.3.1 update-source Loopback0
neighbor 10.0.4.1 remote-as 100
neighbor 10.0.4.1 update-source Loopback0
neighbor 10.0.5.1 remote-as 100
neighbor 10.0.5.1 update-source Loopback0
!
address-family ipv4
neighbor 10.0.1.1 activate
neighbor 10.0.3.1 activate
neighbor 10.0.4.1 activate
neighbor 10.0.5.1 activate
no auto-summary
no synchronization
exit-address-family
!
address-family vpnv4
neighbor 10.0.1.1 activate
neighbor 10.0.1.1 send-community extended
neighbor 10.0.1.1 route-reflector-client
neighbor 10.0.3.1 activate
neighbor 10.0.3.1 send-community extended
neighbor 10.0.3.1 route-reflector-client
neighbor 10.0.4.1 activate
neighbor 10.0.4.1 send-community extended
neighbor 10.0.4.1 route-reflector-client
neighbor 10.0.5.1 activate
neighbor 10.0.5.1 send-community extended
neighbor 10.0.5.1 route-reflector-client
exit-address-family
!
!
!
ip http server
no ip http secure-server
!
!
!
!
mpls ldp router-id Loopback0 force
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end
</pre>

===R3 - MPLS Distribution Router===
<pre>
Current configuration : 2263 bytes
!
! Last configuration change at 12:34:09 UTC Thu Sep 2 2010
! NVRAM config last updated at 12:34:09 UTC Thu Sep 2 2010
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$VCOF$SoSJO1g5dUHduhZ3qLQtZ1
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
ip vrf office
rd 100:20
route-target export 100:20
route-target import 100:20
!
ip vrf production
rd 100:10
route-target export 100:10
route-target import 100:10
!
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.3.1 255.255.255.252
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.6 255.255.255.252
ip router isis
duplex auto
speed auto
mpls ip
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.10
encapsulation dot1Q 10
ip vrf forwarding production
ip address 172.16.2.1 255.255.255.0
ip helper-address 172.30.1.2
ip helper-address 172.30.1.3
!
interface FastEthernet0/1.20
encapsulation dot1Q 20
ip vrf forwarding office
ip address 172.17.2.1 255.255.255.0
ip helper-address 172.30.1.2
ip helper-address 172.30.1.3
!
interface Serial0/1/0
no ip address
shutdown
clock rate 125000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/3/0
no ip address
shutdown
clock rate 2000000
!
router isis
net 49.0001.0100.0000.3001.00
is-type level-2-only
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 100
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community both
exit-address-family
!
address-family ipv4 vrf production
redistribute connected
redistribute static
no synchronization
exit-address-family
!
address-family ipv4 vrf office
redistribute connected
redistribute static
no synchronization
exit-address-family
!
!
!
ip http server
no ip http secure-server
!
!
!
!
mpls ldp router-id Loopback0 force
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end
</pre>

===R4 - MPLS Distribution Router/Server Router===
<pre>
Current configuration : 1794 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$tMv4$/qNEMbkDuH90GdXj.V2Kc/
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip vrf server
rd 100:30
route-target export 100:30
route-target export 100:10
route-target export 100:20
route-target import 100:30
route-target import 100:10
route-target import 100:20
!
ip audit po max-events 100
tag-switching tdp router-id Loopback0 force
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.4.1 255.255.255.252
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.10 255.255.255.252
ip router isis
duplex auto
speed auto
tag-switching ip
!
interface Serial0/0
no ip address
shutdown
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.30
encapsulation dot1Q 30
ip vrf forwarding server
ip address 172.30.1.1 255.255.255.0
no snmp trap link-status
!
interface Serial0/1
no ip address
shutdown
!
router isis
net 49.0001.0100.0000.4001.00
is-type level-2-only
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 100
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community both
exit-address-family
!
address-family ipv4 vrf server
redistribute connected
redistribute static
no auto-summary
no synchronization
exit-address-family
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end
</pre>

===R5 - MPLS Edge Router/Internet Router (VRF internet)===
<pre>
Current configuration : 2203 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$ZDel$DkGMj693div2QL9M7xIUk1
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip vrf internet
rd 100:40
route-target export 100:40
route-target export 100:10
route-target export 100:20
route-target export 100:30
route-target import 100:40
route-target import 100:10
route-target import 100:20
route-target import 100:30
!
ip audit po max-events 100
tag-switching tdp router-id Loopback0 force
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.0.5.1 255.255.255.255
ip router isis
!
interface FastEthernet0/0
ip address 10.0.0.14 255.255.255.252
ip nat inside
ip router isis
duplex auto
speed auto
tag-switching ip
!
interface Serial0/0
no ip address
shutdown
!
interface FastEthernet0/1
ip vrf forwarding internet
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router isis
net 49.0001.0100.0000.0005.00
is-type level-2-only
default-information originate
!
router bgp 100
no synchronization
bgp log-neighbor-changes
neighbor 10.0.2.1 remote-as 100
neighbor 10.0.2.1 update-source Loopback0
no auto-summary
!
address-family vpnv4
neighbor 10.0.2.1 activate
neighbor 10.0.2.1 send-community both
exit-address-family
!
address-family ipv4 vrf internet
redistribute connected
redistribute static
no auto-summary
no synchronization
network 0.0.0.0
exit-address-family
!
ip nat inside source list 100 interface FastEthernet0/1 vrf internet overload
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
ip route vrf internet 0.0.0.0 0.0.0.0 192.168.139.1
!
no ip http server
no ip http secure-server
!
access-list 100 permit ip 172.16.0.0 0.0.255.255 any
access-list 100 permit ip 172.17.0.0 0.0.255.255 any
access-list 100 permit ip 172.30.0.0 0.0.255.255 any
access-list 100 permit ip 10.0.0.0 0.0.255.255 any
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end
</pre>

===SW1 - End-user Access Switch (VRF office/production)===
<pre>
Current configuration : 2601 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$BQq8$0/6FBbzY4eOyLJOHEf4gl1
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 172.16.1.2 255.255.255.0
!
interface Vlan20
ip address 172.17.1.2 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
login
!
end

</pre>

===SW2 - End-user Access Switch (VRF office/production)===
<pre>
Current configuration : 2601 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SW2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$C64C$Bm2YkIFSRpTgC/BVV1oXc0
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
!
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 172.16.2.2 255.255.255.0
!
interface Vlan20
ip address 172.17.2.2 255.255.255.0
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
login
!
end
</pre>

===ServerSW - Server Access Switch (VRF server)===
<pre>
Current configuration : 3274 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname ServerSW
!
enable secret 5 $1$B30/$JKJWthWIIR1hyLISuAO490
!
ip subnet-zero
!
spanning-tree extend system-id
!
!
interface FastEthernet0/1
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/2
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/3
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/19
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 30
switchport mode access
no ip address
spanning-tree portfast
!
interface FastEthernet0/24
switchport mode trunk
no ip address
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan30
ip address 172.30.1.200 255.255.255.0
no ip route-cache
!
ip http server
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
login
!
end
</pre>

File:MPLS VPN.png

2010-09-03T07:15:11Z

Pederrs:

Mobile og trådløse systemer - GPRS

2010-08-24T07:35:35Z

Pederrs: /* Indledning */

= GPRS =

== Indledning ==

General packet radio service (GPRS) er en pakke orienteret mobil data service. GPRS er en udvidelse til GSM som køre på 2G nettet.

Da mobiltelefonerne for alvor begyndt at vinde frem blev GSM teknologien efterhånden for langsom til services så som download af ringetoner, små billeder osv. Derfor udviklede man GPRS som en teknologi man relativt nemt kunne bygge oven på GSM. Grundet dette var det også en teknologi mobilselskaberne kunne implementere uden de store udfordringer. Det medvirkede til at teknologien hurtigt blev udbredt. GPRS muliggjorde blandt andet de første MMS beskeder. Det var også GPRS der grundlagde muligheden for internet på mobilen. Med GPRS fik man muligheden for at gå ind på WAP baserede sider med en hastighed der svarede til et opkaldsmodem.

Nogle gange er det billigere at opgradere et eksisterende system frem for at udvikle et helt nyt. Dette er tilfældet når man snakker om GSM og GPRS. For at forlænge levetiden af GSM standarten, blev GPRS implementeret sammen men dens features og nye muligheder. Dette tillod det aldrende GSM net at leve lidt længere da GPRS kunne kompensere for det øgede behov der blev på GSM nettet. Behovet er dog siden da vokset endnu mere og derfor har man nu implementeret det nye 3G net.

Når man bruger GPRS fra mobil telefoner betaler man ofte pr megabyte, hvor man sammenlignet med en normal modem opkobling betaler pr minut. GPRS data køre som bedst-effort , hvorimod almindelig modem trafik (circuit switching) er sikret en hvis kvalitet (QoS).

2G systemer kombineret med GPRS er ofte også beskrevet som 2,5G der er en teknologi mellem 2G og tredje generation af mobil telefoni - 3G. GPRS opnår sin moderate hastighed ved at bruge, ubrugte TDMA (time division multiple access) kanaler i for eksempel GSM systemet. Oprindelig var det tænkt at GPRS også skulle implementeres i andre standarter, men disse netværk er i stedet blevet konverteret til at bruge GSM standarten. Det betyder at GSM er den eneste form for netværk, hvor GPRS er i brug.

[[Image:2GEvo.jpg]]

GPRS er en videreudvikling af GSM, og er bagudkompatibelt. Der er også lavet endnu en udbygning på GPRS, kaldet EDGE. I dag har 3G teknologierne overtaget størstedelen af dataoverførslerne på det mobile marked, mens EDGE og GPRS stadig bruges til ældre telefoner – og områder hvor der endnu ikke er et tilstrækkeligt dækkende 3G net.

Adressering for GPRS enheder er opbygget i 2 dele, som kaldes et Access Point Name (APN). Network Identifier og Operator Identifier, hvor kun Network Identifier er obligatorisk.
Network identifier er navnet på det netværk som en enhed kan tilgå ved udbyderen, fx internet eller wap.
Operator Identifier består af en Mobile Network Code samt en Mobile County Code, som tilsammen giver en slags domænenavn.
Eks. Internet.mnc010.mmc100

== Services og protokoller ==

=== MMS ===
Er standarden som tillader afsendelse og modtagelse af multimedia indhold på mobilen. Billede, video og lyd. MMS er en videreudvikling af sms’en som bekendt kun kan indeholde tekst. MMS bruges for det meste i forbindelse med billeder taget med en kamera mobil. MMS havde en del børnesygdomme i starten, og var blandt andet plaget af fejl i selve afsendelse/modtagelses processen. Problematikken kunne fx ligge i manglende lyd eller video ved afsendelse af et videoklip.

=== Push to talk ===
Push to talk tillader walkie talkie funktionalitet over det mobile netværk.
Der benyttes half dublex, hvilket i praksis betyder at der kun kan være en afsender af gangen. Push to talk vil i nogle tilfælde være lettere at benytte i forbindelse med simple konference kald, da man ikke skal bruge tid på, at samle alle parter sammen vha. Telefonnumre mv. Push to talk vil typisk være en service man betaler ekstra for. Servicen er aldrig rigtigt slået igennem i Danmark, og er langt fra lige så populært som det er i fx USA.

=== Instant messaging ===
IM har efterhånden en del år på bagen, og blev i sin tid opfundet med det formål, at lade to personer chatte sammen uden forsinkelse. Senere blev det ligeledes muligt, at chatte med mere end en person af gangen. Udviklingen af både mobiltelefonen og det mobile net, har betydet at det nu også er muligt at bruge IM via mobilen.

=== WAP ===

Wireless application protocol. Opfindelsen af WAP muliggjorde tilgangen til mobile netværk fra mobilen. Datidens hastigheder på det mobile netværk, lagde en begrænsning i hvad der kunne vises på mobilen. Der blev derfor lavet specielle simplificerede udgaver af hjemmesiderne kaldet WML (Wireless Markup Language) Udbredelsen af WAP gav mulighed for at få email, sports resultater, nyheds overskrifter, aktiekurser mm. ud på mobilen. WAP hjemmesider kan sammenlignes med nutidens RSS Feeds.

=== Point-to-point ===

Point to point tele kommunikation er overførelse af data sendt mellem to parter. De to computere er ansvarlige for al kommunikationen, og den data formatering der måtte finde sted. Forbindelsen mellem de to computere skabes typisk igennem et RS-232 kabel, hvilket svarer til nutiden serial port. Computere som står indenfor for fysisk kort afstand, vil typisk blive forbundet vha. kabel, men er afstanden for stor bruges der en trådløs forbindelse. Hver computer vil således blive udstyret med et modem til, at konvertere den analoge telekommunikation til det digitale som computerne bruger.

Hastighedsforskellen i afsendelse af sms på henholdsvis GSM og GPRS er, 8-10 stk. pr. minut mod 30 stk. pr. minut på GPRS.

=== Protokoller ===

GPRS understøtter følgende protokoller:

IP – Typisk vil en mobilenhed benytte sig af IP til internetadgang. Oftest i form af TCP/IP, for at undgå pakketab når enheden bevæger sig mellem cells.

PPP – Ved hjælp af PPP kan mobile enheder bruges som modem til en PC.

X.25 – Typisk brugt til f.eks. trådløse betalingsterminaler. Er ikke længere en del af standarden, men kan stadig bruges.

GPRS har i sig selv rigtigt meget overhead. Bare noget så simpelt som en HTTP request kræver en protokol stack på omkring 11 headers, selvfølgelig alt afhængig af netværkets opbygning og opsætning. Det kan løbe op omkring de 50 bytes, selv for små pakker som TCP SYN.

== Hardware ==

== Coding Schemes ==

== Multislot Class ==

Alle GPRS enheder tilhører en Multislot klasser mellem 1-45. Klassen afgør hvor mange radio timeslots som enheden får tildelt, hvilket delvis afgør hvor hurtig enheden kan uploade og downloade. 

Multislot klassen bliver brugt af netværket til at finde ud af hvor mange upload og download radio kanaler enheden skal have tildelt. 

F.eks hvis man ser på klasse 10 har den 4 download timeslots, og 2 upload timeslots, og den kan udnytte 5 adgangen. Netværket vil selv konfigurer enheden til 3+2 hvis man uploader meget, eller 4+1 hvis man downloader meget. 

Hver timeslot maximum kan overføre med 59.2kbit/s, så hvis man har 4 download timeslots kan man download med 4*59,2kbit/s = 236,8kbit/s. Og uploaden vil så være 1*59,2kbit/s = 59.2kbits

=== Tabel over multislot klasser ===

:

{| class="wikitable FCK__ShowTableBorders"
|-
!  Multislot Class 
!  Downlink TS 
!  Uplink TS 
!  Active TS 
|- align="center"
| 1
| 1
| 1
| 2
|- align="center"
| 2
| 2
| 1
| 3
|- align="center"
| 3
| 2
| 2
| 3
|- align="center"
| 4
| 3
| 1
| 4
|- align="center"
| 5
| 2
| 2
| 4
|- align="center"
| 6
| 3
| 2
| 4
|- align="center"
| 7
| 3
| 3
| 4
|- align="center"
| 8
| 4
| 1
| 5
|- align="center"
| 9
| 3
| 2
| 5
|- align="center"
| 10
| 4
| 2
| 5
|- align="center"
| 11
| 4
| 3
| 5
|- align="center"
| 12
| 4
| 4
| 5
|- align="center"
| 30
| 5
| 1
| 6
|- align="center"
| 31
| 5
| 2
| 6
|- align="center"
| 32
| 5
| 3
| 6
|- align="center"
| 33
| 5
| 4
| 6
|- align="center"
| 34
| 5
| 5
| 6
|}

Mobile og trådløse systemer - GPRS

2010-08-24T06:14:53Z

Pederrs: /* Indledning */

Mobile og trådløse systemer - GPRS

2010-08-24T06:13:50Z

Pederrs: /* Indledning */

Mobile og trådløse systemer - GPRS

2010-08-23T11:02:51Z

Pederrs:

[[image:GPRS.jpg|300px|right|thumb|Figur 1: Cisco uddannelser]]

= GPRS =

== Indledning ==

== Services og protokoller ==

== Hardware ==

== Coding Schemes ==

Mobile og trådløse systemer - GPRS

2010-08-23T10:56:14Z

Pederrs:

[[image:GPRS.jpg|300px|right|thumb|Figur 1: Cisco uddannelser]]

= GPRS =

== Indledning ==

Mobile og trådløse systemer - GPRS

2010-08-23T10:55:31Z

Pederrs:

[[image:GPRS.jpg|300px|right|thumb|Figur 1: Cisco uddannelser]]

=== GPRS ===

= Indledning =

Mobile og trådløse systemer - GPRS

2010-08-23T10:55:05Z

Pederrs:

[[image:GPRS.jpg|300px|right|thumb|Figur 1: Cisco uddannelser]]

=== GPRS ===

Indledning

Mobile og trådløse systemer - GPRS

2010-08-23T08:50:36Z

Pederrs:

[[image:GPRS.jpg|300px|right|thumb|Figur 1: Cisco uddannelser]]

== GPRS ==

Mobile og trådløse systemer - GPRS

2010-08-23T08:50:08Z

Pederrs:

File:GPRS.jpg

2010-08-23T08:47:12Z

Pederrs:

Mobile og trådløse systemer - GPRS

2010-08-23T08:41:28Z

Pederrs:

[[Image:CiscoAcedemy.gif|right]]
[[image:Cert_pyramids.jpg|300px|right|thumb|Figur 1: Cisco uddannelser]]

== GPRS ==
*Cisco Network Acedemy [http://cisco.netacad.net cisco.netacad.net]
*Cisco Wiki [http://supportwiki.cisco.com Support Wiki]

== CCNP curriculum ==

Mobile og trådløse systemer - GPRS

2010-08-23T08:40:44Z

Pederrs: /* CCNP curriculum */

Mobile og trådløse systemer - GPRS

2010-08-23T08:36:26Z

Pederrs:

CCNP - Cisco Certified Network Professional - er en overbygning til [[CCNA]] uddannelsen. Se figur 1.
[[Image:CiscoAcedemy.gif|right]]
[[image:Cert_pyramids.jpg|300px|right|thumb|Figur 1: Cisco uddannelser]]

== Cisco Sites ==
*Cisco Network Acedemy [http://cisco.netacad.net cisco.netacad.net]
*Cisco Wiki [http://supportwiki.cisco.com Support Wiki]

== CCNP curriculum ==
*CCNP 1 [http://mars.tekkom.dk/cisco/en_CCNP_BSI_v5030/index.html BSI - Building Scalable Internetworks] (Routning)

*CCNP 2 [http://mars.tekkom.dk/cisco/en_CCNP_ISCW_v5030/index.html ISCW - Implementing Secure Converged Wide-area Networks] (WAN's)
*CCNP 3 [http://mars.tekkom.dk/cisco/ccnp3/index.html BMSN - Building Multilayer Switched Networks] (Switching)
*CCNP 4 [http://mars.tekkom.dk/cisco/en_CCNP_OCN_v5010/index.html OCN - Optimizing Converged Network] (Sikkerhed, QoS ..)

Mobile og trådløse systemer - GPRS

2010-08-23T08:32:00Z

Pederrs: New page: Dette er en test

Dette er en test

File:Setup1.JPG

2009-12-14T13:27:32Z

Pederrs: uploaded a new version of "Image:Setup1.JPG"

Iptables

2009-11-19T08:30:31Z

Pederrs: /* basic firewall */

__TOC__
[[iptables]] is a packet filtering, NAT/PAT and packet mangling tool for Linux. Used by a variety of Linux distributions including Ubuntu, Redhat and CentOS. Iptables is highly configurable and are used in many firewall solutions.
== Using IPTABLES ==
Iptables is a commandline command with numerous options, and need some training to master.
There are three tables you can use filter(default) [[NAT_Linux|nat]] and mangle. Only filter and [[NAT_Linux|nat]] shown below.
[[Image:Iptables chains.png|400px|thumb|left|iptables flowchart showing chains]]
=== The filter chains ===
Basically [[iptables]] has three filters/chains
*INPUT : Packets from a Interface to a local process on the machine. A packet from outside to the machine.
*FORWARD: Packets traversing from one Interface to another Interface
*OUTPUT : Packets from a local process - the machine itself - to the outside world.
See the tables with the command
<pre>
[root@bkshost sysconfig]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
</pre>
=== The nat chains ===
When you use the ''[[NAT_Linux|nat]]'' table or ''mangle'' tables
*PREROUTING : Incoming packets ''before'' Routing decision. Used fx. for Destination [[NAT_Linux|nat]]
*POSTROUTING: Incoming packets ''after'' Routing decision. Used fx. for Source [[NAT_Linux|nat]]
*OUTPUT : Packets from a local process - the machine itself - to the outside world.
See the tables with the command
<pre>
[root@bkshost sysconfig]# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
</pre>

== IPTABLES firewall solutions ==
*Shorewall firewall [http://www.shorewall.net/ Shorewall.net 9
[[Category:Linux]]
== iptables syntax ==
<center>'''Format''': iptables ''<nowiki>[</nowiki>''-t'' tabel]'' ''kommando regel handling''</center>

{| class="prettytable"
| '''''Tabel'''''
|

|-
| filter
| Regler, der bruges til at filtrere uønskede pakker fra.

Virker på INPUT, OUTPUT og FORWARD kæde

|-
| mangle
| Regler, der bruges til at ændre i indholdet af pakker.

Virker på PREROUTING og OUTPUT kæde

|-
| nat
| Regler, der bruges til at ændre adresser i pakker.

Viker på PREROUTING, OUTPUT og POSTROUTING kæde

|-
|
|

|-
| '''''Kommando'''''
|

|-
| -A ''kæde''
| Tilføj (append) for kæde

|-
| -I ''kæde'' ''<nowiki>[nummer]</nowiki>''
| Indsæt for kæde. Angives nummer ikke, antages 1 (dvs. først i tabellen)

|-
| -D ''kæde''
| Slet for kæde

|-
| -F ''<nowiki>[kæde]</nowiki>''
| Slet alle regler. Eventuelt i kæde

|-
| -P ''kæde politik''
| Sæt handling for kæde, hvis ingen regler findes. Politik er ACCEPT, DROP og RETURN

|-
| -L ''<nowiki>[kæde]</nowiki>''
| Vis en liste over regler, eventuelt for bestemt kæde

|-
|
|

|-
| '''Regel'''
|

|-
| -p ''<nowiki>[</nowiki>''!'']protokol''
| Match, hvis pakke bruger protokol. Protokol kan være tcp, udp, icmp eller andre

|-
| -s ''<nowiki>[</nowiki>''!''<nowiki>]adresse[/maske]</nowiki>''
| Match, hvis kilde adresse på pakke passer. Der kan angives en maske til et subnet (både 24 og 255.255.255.0 kan bruges)

|-
| -d ''<nowiki>[</nowiki>''!''<nowiki>]adresse[/maske]</nowiki>''
| Match, hvis destinatinsadresse på pakke passer. Der kan angives en maske til et subnet (både 24 og 255.255.255.0 kan bruges)

|-
| -i ''<nowiki>[</nowiki>''!'']interface''
| Match, hvis input interface er anvendt til at modtage pakken

|-
| -o ''<nowiki>[</nowiki>''!'']interface''
| Match, hvis output interface skal anvendes til at sende pakken

|-
| --sport ''<nowiki>[</nowiki>''!''<nowiki>] [port[:port]]</nowiki>''
| Match, hvis kildeport eller kildeport interval (f.eks. 22:80) anvendes i pakken. Bruges med tcp og udp (se -p regel)

|-
| --dport ''<nowiki>[</nowiki>''!''<nowiki>] [port[:port]]</nowiki>''
| Match, hvis destinationsport eller destinationsport interval (f.eks. 22:80) anvendes i pakken. Bruges med tcp og udp (se -p regel)

|-
| --icmp-type ''<nowiki>[</nowiki>''!'']typenavn''
| Match, hvis ICMP meddelelse er af typenavn, f.eks. echo-request, echo-reply, source-quench, time-exceeded, destination-unreachable, network-unreachable, host-unreachable, protocol-unreachable og port-unreachable. Bruges med icmp (se -p regel)

|-
|
| Bruges ! i ovenstående regler, virker match modsat. F.eks. vil -p !tcp matche alle pakker, der ikke bruger tcp.

|-
|
|

|-
| '''Handling'''
|

|-
| -j ACCEPT
| Accepter pakker, dvs. lad dem gå videre

|-
| -j DROP
| Drop pakker, dvs. smid dem væk

|-
| -j SNAT --to-source ''<nowiki>adresse[:port]</nowiki>''
| Lav ændring i pakkens source IP, hvor ''adresse'' bliver den nye source IP og ''port'' den nye source port

|-
| -j DNAT

--to-destination ''<nowiki>adresse[:port]</nowiki>''
| Lav ændring i pakkens destination IP, hvor ''adresse'' bliver den nye destination IP og ''port'' den nye destination port

|}

== very basic Firewall ==
Accepts only ping from inside to the outside. The machine is open to the Internet. Could be started in /etc/rc.local.
<pre>
#!/bin/bash
#
# Start firewall
# Diverse erklæringer
FW=iptables
INT_NET="192.168.54.0/24"
EXT_NET="172.16.0.0/16"
EXT_IP="172.16.4.4"
EXT_IF="eth0"

# Fjern alle tidligere regler
$FW –F
$FW -F -t nat

# Sæt default politik til afvisning
$FW –P FORWARD DROP

# Tillad ping indefra
$FW –A FORWARD –s $INT_NET –p icmp --icmp-type echo-request –j ACCEPT

# Tillad pong udefra
$FW –A FORWARD –d $INT_NET –p icmp --icmp-type echo-reply –j ACCEPT

# Source NAT på udgående pakker
$FW -t nat –A POSTROUTING –o $EXT_IF –s $INT_NET –j SNAT --to-source $EXT_IP

#Accept forwarding. Start routing
echo "1" > /proc/sys/net/ipv4/ip_forward
</pre>

== basic firewall ==
iptables-save udskriver en liste over regler. Kommandoen

<pre>
Iptables-save > /etc/sysconfig/iptables
</pre>

Gør nuværende opsætning af iptables permanent dvs. den loades under opstart af iptables scriptet /etc/init.d/iptables.

Her er et eksempel på et simpelt firewall script, hvor der åbnet for ping fra det interne net og ud. Samtidig ændres alle interne IP til ekstern IP 172.16.4.4:

<pre>
#!/bin/bash
#
# Start firewall
#
# Tillader ping indefra og ud.
# Lukker for al anden trafik.
#
# OBS! Denne firewall rører udelukkende ved FORWARD
#

# Diverse erklæringer
FW=iptables
INT_NET="192.168.54.0/24"
EXT_NET="172.16.0.0/16"
EXT_IP="172.16.4.4"
EXT_IF="eth0"

# Fjern alle tidligere regler
$FW –F

# Sæt default politik til afvisning
$FW –P FORWARD DROP

# Tillad ping indefra
$FW –A FORWARD –s $INT_NET –p icmp --icmp-type echo-request –j ACCEPT

# Tillad pong udefra
$FW –A FORWARD –d $INT_NET –p icmp --icmp-type echo-reply –j ACCEPT

# Source NAT på udgående pakker
$FW -t nat –A POSTROUTING –o $EXT_IF –s $INT_NET –j SNAT --to-source $EXT_IP
</pre>

Iptables

2009-11-19T08:30:10Z

Pederrs: /* very basic Firewall */

__TOC__
[[iptables]] is a packet filtering, NAT/PAT and packet mangling tool for Linux. Used by a variety of Linux distributions including Ubuntu, Redhat and CentOS. Iptables is highly configurable and are used in many firewall solutions.
== Using IPTABLES ==
Iptables is a commandline command with numerous options, and need some training to master.
There are three tables you can use filter(default) [[NAT_Linux|nat]] and mangle. Only filter and [[NAT_Linux|nat]] shown below.
[[Image:Iptables chains.png|400px|thumb|left|iptables flowchart showing chains]]
=== The filter chains ===
Basically [[iptables]] has three filters/chains
*INPUT : Packets from a Interface to a local process on the machine. A packet from outside to the machine.
*FORWARD: Packets traversing from one Interface to another Interface
*OUTPUT : Packets from a local process - the machine itself - to the outside world.
See the tables with the command
<pre>
[root@bkshost sysconfig]# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
</pre>
=== The nat chains ===
When you use the ''[[NAT_Linux|nat]]'' table or ''mangle'' tables
*PREROUTING : Incoming packets ''before'' Routing decision. Used fx. for Destination [[NAT_Linux|nat]]
*POSTROUTING: Incoming packets ''after'' Routing decision. Used fx. for Source [[NAT_Linux|nat]]
*OUTPUT : Packets from a local process - the machine itself - to the outside world.
See the tables with the command
<pre>
[root@bkshost sysconfig]# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
</pre>

== IPTABLES firewall solutions ==
*Shorewall firewall [http://www.shorewall.net/ Shorewall.net 9
[[Category:Linux]]
== iptables syntax ==
<center>'''Format''': iptables ''<nowiki>[</nowiki>''-t'' tabel]'' ''kommando regel handling''</center>

{| class="prettytable"
| '''''Tabel'''''
|

|-
| filter
| Regler, der bruges til at filtrere uønskede pakker fra.

Virker på INPUT, OUTPUT og FORWARD kæde

|-
| mangle
| Regler, der bruges til at ændre i indholdet af pakker.

Virker på PREROUTING og OUTPUT kæde

|-
| nat
| Regler, der bruges til at ændre adresser i pakker.

Viker på PREROUTING, OUTPUT og POSTROUTING kæde

|-
|
|

|-
| '''''Kommando'''''
|

|-
| -A ''kæde''
| Tilføj (append) for kæde

|-
| -I ''kæde'' ''<nowiki>[nummer]</nowiki>''
| Indsæt for kæde. Angives nummer ikke, antages 1 (dvs. først i tabellen)

|-
| -D ''kæde''
| Slet for kæde

|-
| -F ''<nowiki>[kæde]</nowiki>''
| Slet alle regler. Eventuelt i kæde

|-
| -P ''kæde politik''
| Sæt handling for kæde, hvis ingen regler findes. Politik er ACCEPT, DROP og RETURN

|-
| -L ''<nowiki>[kæde]</nowiki>''
| Vis en liste over regler, eventuelt for bestemt kæde

|-
|
|

|-
| '''Regel'''
|

|-
| -p ''<nowiki>[</nowiki>''!'']protokol''
| Match, hvis pakke bruger protokol. Protokol kan være tcp, udp, icmp eller andre

|-
| -s ''<nowiki>[</nowiki>''!''<nowiki>]adresse[/maske]</nowiki>''
| Match, hvis kilde adresse på pakke passer. Der kan angives en maske til et subnet (både 24 og 255.255.255.0 kan bruges)

|-
| -d ''<nowiki>[</nowiki>''!''<nowiki>]adresse[/maske]</nowiki>''
| Match, hvis destinatinsadresse på pakke passer. Der kan angives en maske til et subnet (både 24 og 255.255.255.0 kan bruges)

|-
| -i ''<nowiki>[</nowiki>''!'']interface''
| Match, hvis input interface er anvendt til at modtage pakken

|-
| -o ''<nowiki>[</nowiki>''!'']interface''
| Match, hvis output interface skal anvendes til at sende pakken

|-
| --sport ''<nowiki>[</nowiki>''!''<nowiki>] [port[:port]]</nowiki>''
| Match, hvis kildeport eller kildeport interval (f.eks. 22:80) anvendes i pakken. Bruges med tcp og udp (se -p regel)

|-
| --dport ''<nowiki>[</nowiki>''!''<nowiki>] [port[:port]]</nowiki>''
| Match, hvis destinationsport eller destinationsport interval (f.eks. 22:80) anvendes i pakken. Bruges med tcp og udp (se -p regel)

|-
| --icmp-type ''<nowiki>[</nowiki>''!'']typenavn''
| Match, hvis ICMP meddelelse er af typenavn, f.eks. echo-request, echo-reply, source-quench, time-exceeded, destination-unreachable, network-unreachable, host-unreachable, protocol-unreachable og port-unreachable. Bruges med icmp (se -p regel)

|-
|
| Bruges ! i ovenstående regler, virker match modsat. F.eks. vil -p !tcp matche alle pakker, der ikke bruger tcp.

|-
|
|

|-
| '''Handling'''
|

|-
| -j ACCEPT
| Accepter pakker, dvs. lad dem gå videre

|-
| -j DROP
| Drop pakker, dvs. smid dem væk

|-
| -j SNAT --to-source ''<nowiki>adresse[:port]</nowiki>''
| Lav ændring i pakkens source IP, hvor ''adresse'' bliver den nye source IP og ''port'' den nye source port

|-
| -j DNAT

--to-destination ''<nowiki>adresse[:port]</nowiki>''
| Lav ændring i pakkens destination IP, hvor ''adresse'' bliver den nye destination IP og ''port'' den nye destination port

|}

== very basic Firewall ==
Accepts only ping from inside to the outside. The machine is open to the Internet. Could be started in /etc/rc.local.
<pre>
#!/bin/bash
#
# Start firewall
# Diverse erklæringer
FW=iptables
INT_NET="192.168.54.0/24"
EXT_NET="172.16.0.0/16"
EXT_IP="172.16.4.4"
EXT_IF="eth0"

# Fjern alle tidligere regler
$FW –F
$FW -F -t nat

# Sæt default politik til afvisning
$FW –P FORWARD DROP

# Tillad ping indefra
$FW –A FORWARD –s $INT_NET –p icmp --icmp-type echo-request –j ACCEPT

# Tillad pong udefra
$FW –A FORWARD –d $INT_NET –p icmp --icmp-type echo-reply –j ACCEPT

# Source NAT på udgående pakker
$FW -t nat –A POSTROUTING –o $EXT_IF –s $INT_NET –j SNAT --to-source $EXT_IP

#Accept forwarding. Start routing
echo "1" > /proc/sys/net/ipv4/ip_forward
</pre>

== basic firewall ==
iptables-save udskriver en liste over regler. Kommandoen

<pre>
Iptables-save > /etc/sysconfig/iptables
</pre>

Gør nuværende opsætning af iptables permanent dvs. den loades under opstart af iptables scriptet /etc/init.d/iptables.

Her er et eksempel på et simpelt firewall script, hvor der åbnet for ping fra det interne net og ud. Samtidig ændres alle interne IP til ekstern IP 172.16.4.4:

<pre>
#!/bin/bash
#
# Start firewall
#
# Tillader ping indefra og ud.
# Lukker for al anden trafik.
#
# OBS! Denne firewall rører udelukkende ved FORWARD
#

# Diverse erklæringer
FW=iptables
INT_NET="192.168.54.0/24"
EXT_NET="172.16.0.0/16"
EXT_IP="172.16.4.4"
EXT_IF="eth0"

# Fjern alle tidligere regler
$FW –F

# Sæt default politik til afvisning
$FW –P FORWARD DROP

# Tillad ping indefra
$FW –A FORWARD –s $INT_NET –p icmp --icmp-type echo-request –j ACCEPT

# Tillad pong udefra
$FW –A FORWARD –d $INT_NET –p icmp --icmp-type echo-reply –j ACCEPT

# Source NAT på udgående pakker
$FW –A POSTROUTING –o $EXT_IF –s $INT_NET –j SNAT --to-source $EXT_IP
</pre>

CCNP 1 øvelses uge 26

2009-06-26T08:48:13Z

Pederrs: /* CCNP øveuge */

= CCNP øveuge =

[[Image:Øvelsesuge26.png|thumb|none|1000px]]

Steffen og Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>
Current configuration : 3785 bytes
!
! Last configuration change at 09:48:42 UTC Fri Jun 26 2009
! NVRAM config last updated at 07:45:25 UTC Fri Jun 26 2009
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$sQ3f$h7zWrkBeT8/8e/M5ZSFla/
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.100.1 192.168.100.2
ip dhcp excluded-address 192.168.100.255
ip dhcp excluded-address 192.168.100.3
!
ip dhcp pool R1
import all
network 192.168.100.0 255.255.255.0
default-router 192.168.100.2
!
!
ip host NET-MAN 192.168.100.4
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.100.2 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address dhcp
ip nat outside
ip virtual-reassembly
!
interface FastEthernet0/1
ip address 172.16.1.1 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/1/0
ip address 172.16.1.17 255.255.255.252
ip nat inside
ip virtual-reassembly
encapsulation ppp
no fair-queue
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
network 172.16.1.0 0.0.0.3 area 0
network 172.16.16.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 172.16.1.0 mask 255.255.255.252
network 172.16.1.16 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
network 192.168.100.0
neighbor 172.16.1.18 remote-as 200
neighbor 172.16.1.18 update-source Serial0/1/0
neighbor 172.16.1.18 default-originate
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0.2
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0.2 overload
!
access-list 1 permit 192.168.100.0 0.0.0.255
access-list 1 permit 192.168.200.0 0.0.0.255
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 1
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2800
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end
</PRE>

=== Router 2 ===
<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$UOYS$kmVcQwW/FtaYR83AkCqB71
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.5 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 172.16.1.2 255.255.255.252
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.3
network 172.16.1.0 0.0.0.3 area 0
network 172.16.1.4 0.0.0.3 area 1
network 192.168.10.2 0.0.0.0 area 0
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 172.16.1.0 mask 255.255.255.252
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.20 mask 255.255.255.252
network 192.168.10.2 mask 255.255.255.255
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 2
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 3 ===

<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$DCVp$gaFMrDNeeBEy6/09dw0xK0
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.6 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.1.9 255.255.255.252
!
interface Serial0/1
ip address 172.16.1.21 255.255.255.252
clock rate 128000
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.2
area 2 stub
network 172.16.1.4 0.0.0.3 area 1
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.3 0.0.0.0 area 1
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.8 mask 255.255.255.252
network 192.168.10.3 mask 255.255.255.255
neighbor 172.16.1.10 remote-as 200
neighbor 172.16.1.10 update-source Serial0/0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 3
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 6 ===

<PRE>
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$XLoI$43Yxy2/h/IPgJTvRnUpZZ1
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.6 255.255.255.252
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.25 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
!
interface Serial0/1
ip address 172.16.1.22 255.255.255.252
!
interface Serial0/2
no ip address
shutdown
!
interface Serial0/3
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 2 stub
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.6 0.0.0.0 area 2
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 172.16.1.20 mask 255.255.255.252
network 172.16.1.24 mask 255.255.255.252
network 192.168.10.6 mask 255.255.255.255
neighbor 172.16.1.21 remote-as 100
neighbor 172.16.1.21 update-source Loopback0
neighbor 172.16.1.26 remote-as 100
neighbor 172.16.1.26 update-source Loopback0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 6
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Switch 1 ===
<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S1
!
enable secret 5 $1$/Jbk$ocZcb1TiogWXSEBkRqejg/
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 2
switchport mode access
spanning-tree portfast
spanning-tree bpdufilter enable
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.100.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.100.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S1
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===
<pre>

version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$tc.T$KynUjta9W5VyH.YvGuc0G/
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.200.255
ip dhcp excluded-address 192.168.200.1 192.168.200.3
!
ip dhcp pool R4
network 192.168.200.0 255.255.255.0
default-router 192.168.200.2
domain-name tekkom.local
dns-server 172.16.4.77
!
!
ip host NET-MAN 192.168.100.4
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.13 255.255.255.252
ip router isis
speed auto
half-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.200.2 255.255.255.0
!
interface Serial0/1/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
!
interface Serial0/2/0
ip address 172.16.1.18 255.255.255.252
encapsulation ppp
clock rate 2000000
!
router isis
net 49.0001.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 172.16.1.12 mask 255.255.255.252
network 172.16.1.16 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
network 192.168.200.0
neighbor 172.16.1.17 remote-as 100
neighbor 172.16.1.17 update-source Serial0/2/0
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
no auto-summary
!
!
!
ip http server
no ip http secure-server
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 4
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2800
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</pre>

=== Router 5 ===

<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$/e8w$UKP0CmYDhhkYDv6U/LIQv.
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.14 255.255.255.252
ip router isis
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
ip address 172.16.1.10 255.255.255.252
no fair-queue
clock rate 2000000
!
interface Serial0/1
no ip address
shutdown
!
router isis
net 49.0001.1921.6801.0005.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 172.16.1.8 mask 255.255.255.252
network 172.16.1.12 mask 255.255.255.252
network 192.168.10.5 mask 255.255.255.255
neighbor 172.16.1.9 remote-as 100
neighbor 172.16.1.9 update-source Loopback0
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.4 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 5
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Switch 2 ===

<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S2
!
enable secret 5 $1$kfZp$y1oT9qGk1r9dAhM2yYCdn0
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
snmp trap mac-notification added
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.200.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.200.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S2
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps copy-config
snmp-server enable traps syslog
snmp-server enable traps entity
snmp-server enable traps flash insertion removal
snmp-server enable traps bridge
snmp-server enable traps stpx
snmp-server enable traps rtr
snmp-server enable traps c2900
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps MAC-Notification
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps hsrp
snmp-server enable traps cluster
snmp-server enable traps vlan-membership
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>

== Leg med Router R1 ==

=== R1 ===
<pre>

Current configuration : 3785 bytes
!
! Last configuration change at 09:48:42 UTC Fri Jun 26 2009
! NVRAM config last updated at 07:45:25 UTC Fri Jun 26 2009
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$sQ3f$h7zWrkBeT8/8e/M5ZSFla/
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.100.1 192.168.100.2
ip dhcp excluded-address 192.168.100.255
ip dhcp excluded-address 192.168.100.3
!
ip dhcp pool R1
import all
network 192.168.100.0 255.255.255.0
default-router 192.168.100.2
!
!
ip host NET-MAN 192.168.100.4
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.100.2 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address dhcp
ip nat outside
ip virtual-reassembly
!
interface FastEthernet0/1
ip address 172.16.1.1 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/1/0
ip address 172.16.1.17 255.255.255.252
ip nat inside
ip virtual-reassembly
encapsulation ppp
no fair-queue
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
max-metric router-lsa on-startup 5
log-adjacency-changes
redistribute bgp 100 subnets route-map LEG
network 172.16.1.0 0.0.0.3 area 0
network 172.16.16.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp log-neighbor-changes
bgp redistribute-internal
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 172.16.1.0 mask 255.255.255.252
network 172.16.1.16 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
network 192.168.100.0
neighbor 172.16.1.18 remote-as 200
neighbor 172.16.1.18 update-source Serial0/1/0
neighbor 172.16.1.18 default-originate
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0.2
!
ip as-path access-list 1 permit 200
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0.2 overload
!
access-list 1 permit 192.168.100.0 0.0.0.255
access-list 1 permit 192.168.200.0 0.0.0.255
access-list 78 permit any
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 1
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2800
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
route-map LEG permit 10
match ip address 78
set metric 17
set metric-type external
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</pre>

[[category:cisco]]

CCNP 1 øvelses uge 26

2009-06-26T08:45:16Z

Pederrs: /* Router 1 */

CCNP 1 øvelses uge 26

2009-06-26T08:44:14Z

Pederrs: /* Router 1 */

= CCNP øveuge =

[[Image:Øvelsesuge26.png|thumb|none|1000px]]

Steffen og Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>
Current configuration : 3785 bytes
!
! Last configuration change at 09:48:42 UTC Fri Jun 26 2009
! NVRAM config last updated at 07:45:25 UTC Fri Jun 26 2009
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$sQ3f$h7zWrkBeT8/8e/M5ZSFla/
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.100.1 192.168.100.2
ip dhcp excluded-address 192.168.100.255
ip dhcp excluded-address 192.168.100.3
!
ip dhcp pool R1
import all
network 192.168.100.0 255.255.255.0
default-router 192.168.100.2
!
!
ip host NET-MAN 192.168.100.4
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.100.2 255.255.255.0
ip nat inside
ip virtual-reassembly
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address dhcp
ip nat outside
ip virtual-reassembly
!
interface FastEthernet0/1
ip address 172.16.1.1 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/1/0
ip address 172.16.1.17 255.255.255.252
ip nat inside
ip virtual-reassembly
encapsulation ppp
no fair-queue
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
max-metric router-lsa on-startup 5
log-adjacency-changes
redistribute bgp 100 subnets route-map LEG
network 172.16.1.0 0.0.0.3 area 0
network 172.16.16.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp log-neighbor-changes
bgp redistribute-internal
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 172.16.1.0 mask 255.255.255.252
network 172.16.1.16 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
network 192.168.100.0
neighbor 172.16.1.18 remote-as 200
neighbor 172.16.1.18 update-source Serial0/1/0
neighbor 172.16.1.18 default-originate
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0.2
!
ip as-path access-list 1 permit 200
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0.2 overload
!
access-list 1 permit 192.168.100.0 0.0.0.255
access-list 1 permit 192.168.200.0 0.0.0.255
access-list 78 permit any
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 1
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2800
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
route-map LEG permit 10
match ip address 78
set metric 17
set metric-type external
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end
</PRE>

=== Router 2 ===
<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$UOYS$kmVcQwW/FtaYR83AkCqB71
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.5 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 172.16.1.2 255.255.255.252
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.3
network 172.16.1.0 0.0.0.3 area 0
network 172.16.1.4 0.0.0.3 area 1
network 192.168.10.2 0.0.0.0 area 0
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 172.16.1.0 mask 255.255.255.252
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.20 mask 255.255.255.252
network 192.168.10.2 mask 255.255.255.255
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 2
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 3 ===

<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$DCVp$gaFMrDNeeBEy6/09dw0xK0
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.6 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.1.9 255.255.255.252
!
interface Serial0/1
ip address 172.16.1.21 255.255.255.252
clock rate 128000
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.2
area 2 stub
network 172.16.1.4 0.0.0.3 area 1
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.3 0.0.0.0 area 1
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.8 mask 255.255.255.252
network 192.168.10.3 mask 255.255.255.255
neighbor 172.16.1.10 remote-as 200
neighbor 172.16.1.10 update-source Serial0/0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 3
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 6 ===

<PRE>
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$XLoI$43Yxy2/h/IPgJTvRnUpZZ1
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.6 255.255.255.252
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.25 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
!
interface Serial0/1
ip address 172.16.1.22 255.255.255.252
!
interface Serial0/2
no ip address
shutdown
!
interface Serial0/3
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 2 stub
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.6 0.0.0.0 area 2
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 172.16.1.20 mask 255.255.255.252
network 172.16.1.24 mask 255.255.255.252
network 192.168.10.6 mask 255.255.255.255
neighbor 172.16.1.21 remote-as 100
neighbor 172.16.1.21 update-source Loopback0
neighbor 172.16.1.26 remote-as 100
neighbor 172.16.1.26 update-source Loopback0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 6
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Switch 1 ===
<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S1
!
enable secret 5 $1$/Jbk$ocZcb1TiogWXSEBkRqejg/
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 2
switchport mode access
spanning-tree portfast
spanning-tree bpdufilter enable
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.100.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.100.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S1
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===
<pre>

version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$tc.T$KynUjta9W5VyH.YvGuc0G/
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.200.255
ip dhcp excluded-address 192.168.200.1 192.168.200.3
!
ip dhcp pool R4
network 192.168.200.0 255.255.255.0
default-router 192.168.200.2
domain-name tekkom.local
dns-server 172.16.4.77
!
!
ip host NET-MAN 192.168.100.4
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.13 255.255.255.252
ip router isis
speed auto
half-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.200.2 255.255.255.0
!
interface Serial0/1/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
!
interface Serial0/2/0
ip address 172.16.1.18 255.255.255.252
encapsulation ppp
clock rate 2000000
!
router isis
net 49.0001.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 172.16.1.12 mask 255.255.255.252
network 172.16.1.16 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
network 192.168.200.0
neighbor 172.16.1.17 remote-as 100
neighbor 172.16.1.17 update-source Serial0/2/0
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
no auto-summary
!
!
!
ip http server
no ip http secure-server
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 4
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2800
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps frame-relay multilink bundle-mismatch
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</pre>

=== Router 5 ===

<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$/e8w$UKP0CmYDhhkYDv6U/LIQv.
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.14 255.255.255.252
ip router isis
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
ip address 172.16.1.10 255.255.255.252
no fair-queue
clock rate 2000000
!
interface Serial0/1
no ip address
shutdown
!
router isis
net 49.0001.1921.6801.0005.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 172.16.1.8 mask 255.255.255.252
network 172.16.1.12 mask 255.255.255.252
network 192.168.10.5 mask 255.255.255.255
neighbor 172.16.1.9 remote-as 100
neighbor 172.16.1.9 update-source Loopback0
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.4 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 5
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Switch 2 ===

<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S2
!
enable secret 5 $1$kfZp$y1oT9qGk1r9dAhM2yYCdn0
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
snmp trap mac-notification added
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.200.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.200.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S2
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps copy-config
snmp-server enable traps syslog
snmp-server enable traps entity
snmp-server enable traps flash insertion removal
snmp-server enable traps bridge
snmp-server enable traps stpx
snmp-server enable traps rtr
snmp-server enable traps c2900
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps MAC-Notification
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps hsrp
snmp-server enable traps cluster
snmp-server enable traps vlan-membership
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>
[[category:cisco]]

CCNP 1 øvelses uge 26

2009-06-26T08:37:38Z

Pederrs: /* CCNP øveuge */

= CCNP øveuge =

[[Image:Øvelsesuge26.png|thumb|none|1000px]]

Steffen og Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 2 ===
<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$UOYS$kmVcQwW/FtaYR83AkCqB71
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.5 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 172.16.1.2 255.255.255.252
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.3
network 172.16.1.0 0.0.0.3 area 0
network 172.16.1.4 0.0.0.3 area 1
network 192.168.10.2 0.0.0.0 area 0
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 172.16.1.0 mask 255.255.255.252
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.20 mask 255.255.255.252
network 192.168.10.2 mask 255.255.255.255
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 2
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 3 ===

<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$DCVp$gaFMrDNeeBEy6/09dw0xK0
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.6 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.1.9 255.255.255.252
!
interface Serial0/1
ip address 172.16.1.21 255.255.255.252
clock rate 128000
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.2
area 2 stub
network 172.16.1.4 0.0.0.3 area 1
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.3 0.0.0.0 area 1
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.8 mask 255.255.255.252
network 192.168.10.3 mask 255.255.255.255
neighbor 172.16.1.10 remote-as 200
neighbor 172.16.1.10 update-source Serial0/0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 3
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 6 ===

<PRE>
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$XLoI$43Yxy2/h/IPgJTvRnUpZZ1
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.6 255.255.255.252
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.25 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
!
interface Serial0/1
ip address 172.16.1.22 255.255.255.252
!
interface Serial0/2
no ip address
shutdown
!
interface Serial0/3
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 2 stub
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.6 0.0.0.0 area 2
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 172.16.1.20 mask 255.255.255.252
network 172.16.1.24 mask 255.255.255.252
network 192.168.10.6 mask 255.255.255.255
neighbor 172.16.1.21 remote-as 100
neighbor 172.16.1.21 update-source Loopback0
neighbor 172.16.1.26 remote-as 100
neighbor 172.16.1.26 update-source Loopback0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 6
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Switch 1 ===
<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S1
!
enable secret 5 $1$/Jbk$ocZcb1TiogWXSEBkRqejg/
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 2
switchport mode access
spanning-tree portfast
spanning-tree bpdufilter enable
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.100.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.100.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S1
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end

</PRE>

=== Switch 2 ===

<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S2
!
enable secret 5 $1$kfZp$y1oT9qGk1r9dAhM2yYCdn0
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
snmp trap mac-notification added
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.200.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.200.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S2
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps copy-config
snmp-server enable traps syslog
snmp-server enable traps entity
snmp-server enable traps flash insertion removal
snmp-server enable traps bridge
snmp-server enable traps stpx
snmp-server enable traps rtr
snmp-server enable traps c2900
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps MAC-Notification
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps hsrp
snmp-server enable traps cluster
snmp-server enable traps vlan-membership
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>
[[category:cisco]]

CCNP 1 øvelses uge 26

2009-06-26T08:36:31Z

Pederrs: /* CCNP øveuge */

= CCNP øveuge =

[[Image:Øvelsesuge26.png|thumb|none|1000px]]

Steffen og Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 3 ===

<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$DCVp$gaFMrDNeeBEy6/09dw0xK0
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.6 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.1.9 255.255.255.252
!
interface Serial0/1
ip address 172.16.1.21 255.255.255.252
clock rate 128000
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.2
area 2 stub
network 172.16.1.4 0.0.0.3 area 1
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.3 0.0.0.0 area 1
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.8 mask 255.255.255.252
network 192.168.10.3 mask 255.255.255.255
neighbor 172.16.1.10 remote-as 200
neighbor 172.16.1.10 update-source Serial0/0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 3
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 6 ===

<PRE>
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$XLoI$43Yxy2/h/IPgJTvRnUpZZ1
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.6 255.255.255.252
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.25 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
!
interface Serial0/1
ip address 172.16.1.22 255.255.255.252
!
interface Serial0/2
no ip address
shutdown
!
interface Serial0/3
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 2 stub
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.6 0.0.0.0 area 2
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 172.16.1.20 mask 255.255.255.252
network 172.16.1.24 mask 255.255.255.252
network 192.168.10.6 mask 255.255.255.255
neighbor 172.16.1.21 remote-as 100
neighbor 172.16.1.21 update-source Loopback0
neighbor 172.16.1.26 remote-as 100
neighbor 172.16.1.26 update-source Loopback0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 6
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Switch 1 ===
<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S1
!
enable secret 5 $1$/Jbk$ocZcb1TiogWXSEBkRqejg/
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 2
switchport mode access
spanning-tree portfast
spanning-tree bpdufilter enable
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.100.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.100.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S1
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>

=== Router 2 ===
<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$UOYS$kmVcQwW/FtaYR83AkCqB71
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.5 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 172.16.1.2 255.255.255.252
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.3
network 172.16.1.0 0.0.0.3 area 0
network 172.16.1.4 0.0.0.3 area 1
network 192.168.10.2 0.0.0.0 area 0
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 172.16.1.0 mask 255.255.255.252
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.20 mask 255.255.255.252
network 192.168.10.2 mask 255.255.255.255
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 2
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end

</PRE>

=== Switch 2 ===

<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S2
!
enable secret 5 $1$kfZp$y1oT9qGk1r9dAhM2yYCdn0
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
snmp trap mac-notification added
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.200.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.200.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S2
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps copy-config
snmp-server enable traps syslog
snmp-server enable traps entity
snmp-server enable traps flash insertion removal
snmp-server enable traps bridge
snmp-server enable traps stpx
snmp-server enable traps rtr
snmp-server enable traps c2900
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps MAC-Notification
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps hsrp
snmp-server enable traps cluster
snmp-server enable traps vlan-membership
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>
[[category:cisco]]

CCNP 1 øvelses uge 26

2009-06-26T08:35:33Z

Pederrs: /* CCNP øveuge */

= CCNP øveuge =

[[Image:Øvelsesuge26.png|thumb|none|1000px]]

Steffen og Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Switch 1 ===
<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S1
!
enable secret 5 $1$/Jbk$ocZcb1TiogWXSEBkRqejg/
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 2
switchport mode access
spanning-tree portfast
spanning-tree bpdufilter enable
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.100.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.100.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S1
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>

=== Router 2 ===
<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$UOYS$kmVcQwW/FtaYR83AkCqB71
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.5 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 172.16.1.2 255.255.255.252
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.3
network 172.16.1.0 0.0.0.3 area 0
network 172.16.1.4 0.0.0.3 area 1
network 192.168.10.2 0.0.0.0 area 0
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 172.16.1.0 mask 255.255.255.252
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.20 mask 255.255.255.252
network 192.168.10.2 mask 255.255.255.255
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 2
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 3 ===

<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$DCVp$gaFMrDNeeBEy6/09dw0xK0
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.6 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.1.9 255.255.255.252
!
interface Serial0/1
ip address 172.16.1.21 255.255.255.252
clock rate 128000
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.2
area 2 stub
network 172.16.1.4 0.0.0.3 area 1
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.3 0.0.0.0 area 1
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.8 mask 255.255.255.252
network 192.168.10.3 mask 255.255.255.255
neighbor 172.16.1.10 remote-as 200
neighbor 172.16.1.10 update-source Serial0/0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 3
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 6 ===

<PRE>
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$XLoI$43Yxy2/h/IPgJTvRnUpZZ1
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.6 255.255.255.252
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.25 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
!
interface Serial0/1
ip address 172.16.1.22 255.255.255.252
!
interface Serial0/2
no ip address
shutdown
!
interface Serial0/3
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 2 stub
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.6 0.0.0.0 area 2
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 172.16.1.20 mask 255.255.255.252
network 172.16.1.24 mask 255.255.255.252
network 192.168.10.6 mask 255.255.255.255
neighbor 172.16.1.21 remote-as 100
neighbor 172.16.1.21 update-source Loopback0
neighbor 172.16.1.26 remote-as 100
neighbor 172.16.1.26 update-source Loopback0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 6
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end

</PRE>

=== Switch 2 ===

<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S2
!
enable secret 5 $1$kfZp$y1oT9qGk1r9dAhM2yYCdn0
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
snmp trap mac-notification added
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.200.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.200.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S2
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps copy-config
snmp-server enable traps syslog
snmp-server enable traps entity
snmp-server enable traps flash insertion removal
snmp-server enable traps bridge
snmp-server enable traps stpx
snmp-server enable traps rtr
snmp-server enable traps c2900
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps MAC-Notification
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps hsrp
snmp-server enable traps cluster
snmp-server enable traps vlan-membership
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>
[[category:cisco]]

CCNP 1 øvelses uge 26

2009-06-26T08:32:47Z

Pederrs: /* CCNP øveuge */

= CCNP øveuge =

[[Image:Øvelsesuge26.png|thumb|none|1000px]]

Steffen og Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Switch 1 ===
<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S1
!
enable secret 5 $1$/Jbk$ocZcb1TiogWXSEBkRqejg/
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 2
switchport mode access
spanning-tree portfast
spanning-tree bpdufilter enable
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.100.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.100.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S1
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>

=== Router 2 ===
<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$UOYS$kmVcQwW/FtaYR83AkCqB71
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.5 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 172.16.1.2 255.255.255.252
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.3
network 172.16.1.0 0.0.0.3 area 0
network 172.16.1.4 0.0.0.3 area 1
network 192.168.10.2 0.0.0.0 area 0
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 172.16.1.0 mask 255.255.255.252
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.20 mask 255.255.255.252
network 192.168.10.2 mask 255.255.255.255
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 2
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 3 ===

<PRE>

version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$DCVp$gaFMrDNeeBEy6/09dw0xK0
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.6 255.255.255.252
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.1.9 255.255.255.252
!
interface Serial0/1
ip address 172.16.1.21 255.255.255.252
clock rate 128000
!
router ospf 1
log-adjacency-changes
area 1 virtual-link 192.168.10.2
area 2 stub
network 172.16.1.4 0.0.0.3 area 1
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.3 0.0.0.0 area 1
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 172.16.1.4 mask 255.255.255.252
network 172.16.1.8 mask 255.255.255.252
network 192.168.10.3 mask 255.255.255.255
neighbor 172.16.1.10 remote-as 200
neighbor 172.16.1.10 update-source Serial0/0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.6 remote-as 100
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 3
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 6 ===

<PRE>
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$XLoI$43Yxy2/h/IPgJTvRnUpZZ1
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
ip host NET-MAN 192.168.100.4
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.6 255.255.255.252
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.1.25 255.255.255.252
speed auto
half-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
!
interface Serial0/1
ip address 172.16.1.22 255.255.255.252
!
interface Serial0/2
no ip address
shutdown
!
interface Serial0/3
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
area 2 stub
network 172.16.1.20 0.0.0.3 area 2
network 192.168.10.6 0.0.0.0 area 2
!
router ospf 100
log-adjacency-changes
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 172.16.1.20 mask 255.255.255.252
network 172.16.1.24 mask 255.255.255.252
network 192.168.10.6 mask 255.255.255.255
neighbor 172.16.1.21 remote-as 100
neighbor 172.16.1.21 update-source Loopback0
neighbor 172.16.1.26 remote-as 100
neighbor 172.16.1.26 update-source Loopback0
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Loopback0
snmp-server location Router 6
snmp-server contact Steffen - Phone: ********
snmp-server chassis-id Cisco 2621XM
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps tty
snmp-server enable traps config
snmp-server enable traps vtp
snmp-server host 192.168.100.4 version 2c NMrw
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end

</PRE>

=== Router 6 ===
<pre>
R6#show run
Building configuration...

Current configuration : 2757 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$Kojb$.6WNyP1fOj3ahInp7IL8m0
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
no ip domain lookup
ip audit po max-events 100
!
username R3 password 0 cisco
!
interface Loopback0
ip address 192.168.10.6 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.6.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.6.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.99.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address 192.168.2.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.3
encapsulation dot1Q 3
ip address 192.168.3.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.4
encapsulation dot1Q 4
ip address 192.168.4.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface Serial0/0
no ip address
no fair-queue
!
interface Serial0/1
ip address 172.16.100.18 255.255.255.252
encapsulation ppp
clock rate 128000
ppp authentication chap
!
interface Serial0/2
no ip address
shutdown
!
router isis 1
net 49.0001.1921.6801.0006.00
!
router bgp 200
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 10.6.4.0 mask 255.255.255.0
network 10.6.5.0 mask 255.255.255.0
network 192.168.2.0
network 192.168.10.6 mask 255.255.255.255
aggregate-address 10.6.0.0 255.255.0.0 summary-only
neighbor 172.16.100.17 remote-as 100
neighbor 172.16.100.17 update-source Serial0/1
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.4 next-hop-self
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
banner motd ^C I hate myself ^C
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end
</pre>

=== Switch 2 ===

<PRE>
Current configuration : 2626 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW2
!
enable secret 5 $1$YqCY$l6FXVLpSE8p/mWoS5Lwn71
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 4
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
switchport mode trunk
!
interface Vlan1
ip address 192.168.99.12 255.255.255.0
no ip route-cache
!
interface Vlan2
no ip address
no ip route-cache
!
interface Vlan3
no ip address
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

=== Switch 3 ===

<PRE>
Current configuration : 2587 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW3
!
enable secret 5 $1$Pklq$m1S7ZPKCeWHhAC6zktG4Z/
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
--More-- !
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
--More-- !
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
--More-- switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
--More-- switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
--More-- interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.99.13 255.255.255.0
!
interface Vlan2
no ip address
!
ip classless
ip http server
!
!
!
--More-- control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end
</PRE>

=== Switch 2 ===

<PRE>

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S2
!
enable secret 5 $1$kfZp$y1oT9qGk1r9dAhM2yYCdn0
enable password cisco
!
ip subnet-zero
!
ip host NET-MAN 192.168.100.4
!
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
!
!
interface FastEthernet0/1
switchport mode access
!
interface FastEthernet0/2
switchport mode access
!
interface FastEthernet0/3
switchport mode access
!
interface FastEthernet0/4
switchport mode access
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
!
interface FastEthernet0/7
switchport mode access
!
interface FastEthernet0/8
switchport mode access
!
interface FastEthernet0/9
switchport mode access
!
interface FastEthernet0/10
switchport mode access
!
interface FastEthernet0/11
switchport mode access
snmp trap mac-notification added
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
!
interface FastEthernet0/13
switchport mode access
!
interface FastEthernet0/14
switchport mode access
!
interface FastEthernet0/15
switchport mode access
!
interface FastEthernet0/16
switchport mode access
!
interface FastEthernet0/17
switchport mode access
!
interface FastEthernet0/18
switchport mode access
!
interface FastEthernet0/19
switchport mode access
!
interface FastEthernet0/20
switchport mode access
!
interface FastEthernet0/21
switchport mode access
!
interface FastEthernet0/22
switchport mode access
!
interface FastEthernet0/23
switchport mode access
!
interface FastEthernet0/24
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.200.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.200.2
ip http server
snmp-server community NMro RO
snmp-server community NMrw RW
snmp-server trap-source Vlan1
snmp-server location S2
snmp-server contact Steffen - Phone ********
snmp-server chassis-id Cisco 2950
snmp-server enable traps snmp authentication warmstart linkdown linkup coldstart
snmp-server enable traps config
snmp-server enable traps copy-config
snmp-server enable traps syslog
snmp-server enable traps entity
snmp-server enable traps flash insertion removal
snmp-server enable traps bridge
snmp-server enable traps stpx
snmp-server enable traps rtr
snmp-server enable traps c2900
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps MAC-Notification
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps hsrp
snmp-server enable traps cluster
snmp-server enable traps vlan-membership
snmp-server host 192.168.100.4 version 2c NMrw
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end

</PRE>
[[category:cisco]]

File:Øvelsesuge26.png

2009-06-26T08:26:58Z

Pederrs:

CCNP 1 øvelses uge 26

2009-06-26T08:17:44Z

Pederrs: New page: = CCNP øveuge = 1000px Steffen og Peder == OSPF netværk == === Router 1 === <PRE> ip dhcp excluded-address 192.168.1.1 192.168.1.10 ! ip d...

= CCNP øveuge =

[[Image:Øvelsesuge1.png|thumb|none|1000px]]

Steffen og Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 2 ===
<PRE>

hostname R2
!
enable secret 5 $1$WQha$7yhAdoRtJxu.Pvc6iKObY.
enable password cisco
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface Loopback4
ip address 10.2.4.1 255.255.255.0
!
interface Loopback5
ip address 10.2.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.2 255.255.255.252
speed auto
full-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip helper-address 172.16.100.1
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.2.1.0 0.0.0.255 area 0
network 10.2.2.0 0.0.0.255 area 0
network 10.2.3.0 0.0.0.255 area 0
network 10.2.4.0 0.0.0.255 area 0
network 10.2.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.2 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 10.2.4.0 mask 255.255.255.0
network 10.2.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.1.0
network 192.168.10.2 mask 255.255.255.255
aggregate-address 10.2.0.0 255.255.0.0 summary-only
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 3 ===
<PRE>

hostname R3
!
enable secret 5 $1$pIBL$bSJ2ONNGoeWWxBX7gwSm71
enable password cisco
!
ip audit po max-events 100
!
username R6 password 0 cisco
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface Loopback4
ip address 10.3.4.1 255.255.255.0
!
interface Loopback5
ip address 10.3.5.1 255.255.255.0
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.100.17 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface BRI0/0
no ip address
encapsulation hdlc
shutdown
!
interface FastEthernet0/1
ip address 192.168.1.2 255.255.255.0
speed auto
full-duplex
no mop enabled
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.3.1.0 0.0.0.255 area 0
network 10.3.2.0 0.0.0.255 area 0
network 10.3.3.0 0.0.0.255 area 0
network 10.3.4.0 0.0.0.255 area 0
network 10.3.5.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.3 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 10.3.4.0 mask 255.255.255.0
network 10.3.5.0 mask 255.255.255.0
network 192.168.1.0
network 192.168.10.3 mask 255.255.255.255
aggregate-address 10.3.0.0 255.255.0.0 summary-only
neighbor 172.16.100.18 remote-as 200
neighbor 172.16.100.18 update-source Serial0/0
neighbor 172.16.100.18 route-map prove in
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
access-list 10 permit 10.6.0.0 0.0.255.255
!
route-map prove permit 10
match ip address 10
set local-preference 1000
!
route-map prove permit 20
!
line con 0
line aux 0
line vty 0 4
password cisco
login

</PRE>

=== Switch 1 ===

<PRE>

Current configuration : 1333 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW1
!
enable secret 5 $1$3BEJ$gjcaPkd2T6grrMreIYp0t0
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip http server
!
control-plane
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end

</PRE>

=== Router 6 ===
<pre>
R6#show run
Building configuration...

Current configuration : 2757 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$Kojb$.6WNyP1fOj3ahInp7IL8m0
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
no ip domain lookup
ip audit po max-events 100
!
username R3 password 0 cisco
!
interface Loopback0
ip address 192.168.10.6 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.6.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.6.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.99.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address 192.168.2.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.3
encapsulation dot1Q 3
ip address 192.168.3.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.4
encapsulation dot1Q 4
ip address 192.168.4.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface Serial0/0
no ip address
no fair-queue
!
interface Serial0/1
ip address 172.16.100.18 255.255.255.252
encapsulation ppp
clock rate 128000
ppp authentication chap
!
interface Serial0/2
no ip address
shutdown
!
router isis 1
net 49.0001.1921.6801.0006.00
!
router bgp 200
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 10.6.4.0 mask 255.255.255.0
network 10.6.5.0 mask 255.255.255.0
network 192.168.2.0
network 192.168.10.6 mask 255.255.255.255
aggregate-address 10.6.0.0 255.255.0.0 summary-only
neighbor 172.16.100.17 remote-as 100
neighbor 172.16.100.17 update-source Serial0/1
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.4 next-hop-self
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
banner motd ^C I hate myself ^C
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end
</pre>

=== Switch 2 ===

<PRE>
Current configuration : 2626 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW2
!
enable secret 5 $1$YqCY$l6FXVLpSE8p/mWoS5Lwn71
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 4
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
switchport mode trunk
!
interface Vlan1
ip address 192.168.99.12 255.255.255.0
no ip route-cache
!
interface Vlan2
no ip address
no ip route-cache
!
interface Vlan3
no ip address
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

=== Switch 3 ===

<PRE>
Current configuration : 2587 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW3
!
enable secret 5 $1$Pklq$m1S7ZPKCeWHhAC6zktG4Z/
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
--More-- !
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
--More-- !
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
--More-- switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
--More-- switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
--More-- interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.99.13 255.255.255.0
!
interface Vlan2
no ip address
!
ip classless
ip http server
!
!
!
--More-- control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end
</PRE>

=== Switch 4 ===

<PRE>

Current configuration : 2587 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW4
!
enable secret 5 $1$rom0$uHDgDlJHC.sjIFOFVjJcV1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.99.14 255.255.255.0
!
interface Vlan2
no ip address
!
ip classless
ip http server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

</PRE>
[[category:cisco]]

CCNP øveuge

2009-03-27T11:05:49Z

Pederrs: /* Router 5 */

= CCNP øveuge =

[[Image:Øvelsesuge.png|thumb|none|1000px]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 2 ===
<PRE>

hostname R2
!
enable secret 5 $1$WQha$7yhAdoRtJxu.Pvc6iKObY.
enable password cisco
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface Loopback4
ip address 10.2.4.1 255.255.255.0
!
interface Loopback5
ip address 10.2.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.2 255.255.255.252
speed auto
full-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip helper-address 172.16.100.1
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.2.1.0 0.0.0.255 area 0
network 10.2.2.0 0.0.0.255 area 0
network 10.2.3.0 0.0.0.255 area 0
network 10.2.4.0 0.0.0.255 area 0
network 10.2.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.2 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 10.2.4.0 mask 255.255.255.0
network 10.2.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.1.0
network 192.168.10.2 mask 255.255.255.255
aggregate-address 10.2.0.0 255.255.0.0 summary-only
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 3 ===
<PRE>

hostname R3
!
enable secret 5 $1$pIBL$bSJ2ONNGoeWWxBX7gwSm71
enable password cisco
!
ip audit po max-events 100
!
username R6 password 0 cisco
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface Loopback4
ip address 10.3.4.1 255.255.255.0
!
interface Loopback5
ip address 10.3.5.1 255.255.255.0
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.100.17 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface BRI0/0
no ip address
encapsulation hdlc
shutdown
!
interface FastEthernet0/1
ip address 192.168.1.2 255.255.255.0
speed auto
full-duplex
no mop enabled
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.3.1.0 0.0.0.255 area 0
network 10.3.2.0 0.0.0.255 area 0
network 10.3.3.0 0.0.0.255 area 0
network 10.3.4.0 0.0.0.255 area 0
network 10.3.5.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.3 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 10.3.4.0 mask 255.255.255.0
network 10.3.5.0 mask 255.255.255.0
network 192.168.1.0
network 192.168.10.3 mask 255.255.255.255
aggregate-address 10.3.0.0 255.255.0.0 summary-only
neighbor 172.16.100.18 remote-as 200
neighbor 172.16.100.18 update-source Serial0/0
neighbor 172.16.100.18 route-map prove in
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
access-list 10 permit 10.6.0.0 0.0.255.255
!
route-map prove permit 10
match ip address 10
set local-preference 1000
!
route-map prove permit 20
!
line con 0
line aux 0
line vty 0 4
password cisco
login

</PRE>

=== Switch 1 ===

<PRE>

Current configuration : 1333 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW1
!
enable secret 5 $1$3BEJ$gjcaPkd2T6grrMreIYp0t0
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip http server
!
control-plane
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end

</PRE>

=== Router 6 ===

=== Switch 2 ===

<PRE>
Current configuration : 2626 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW2
!
enable secret 5 $1$YqCY$l6FXVLpSE8p/mWoS5Lwn71
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 4
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
switchport mode trunk
!
interface Vlan1
ip address 192.168.99.12 255.255.255.0
no ip route-cache
!
interface Vlan2
no ip address
no ip route-cache
!
interface Vlan3
no ip address
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

=== Switch 3 ===

=== Switch 4 ===

<PRE>

Current configuration : 2587 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW4
!
enable secret 5 $1$rom0$uHDgDlJHC.sjIFOFVjJcV1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.99.14 255.255.255.0
!
interface Vlan2
no ip address
!
ip classless
ip http server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

</PRE>

CCNP øveuge

2009-03-27T11:05:21Z

Pederrs: /* Router 5 */

= CCNP øveuge =

[[Image:Øvelsesuge.png|thumb|none|1000px]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 2 ===
<PRE>

hostname R2
!
enable secret 5 $1$WQha$7yhAdoRtJxu.Pvc6iKObY.
enable password cisco
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface Loopback4
ip address 10.2.4.1 255.255.255.0
!
interface Loopback5
ip address 10.2.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.2 255.255.255.252
speed auto
full-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip helper-address 172.16.100.1
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.2.1.0 0.0.0.255 area 0
network 10.2.2.0 0.0.0.255 area 0
network 10.2.3.0 0.0.0.255 area 0
network 10.2.4.0 0.0.0.255 area 0
network 10.2.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.2 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 10.2.4.0 mask 255.255.255.0
network 10.2.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.1.0
network 192.168.10.2 mask 255.255.255.255
aggregate-address 10.2.0.0 255.255.0.0 summary-only
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 3 ===
<PRE>

hostname R3
!
enable secret 5 $1$pIBL$bSJ2ONNGoeWWxBX7gwSm71
enable password cisco
!
ip audit po max-events 100
!
username R6 password 0 cisco
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface Loopback4
ip address 10.3.4.1 255.255.255.0
!
interface Loopback5
ip address 10.3.5.1 255.255.255.0
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.100.17 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface BRI0/0
no ip address
encapsulation hdlc
shutdown
!
interface FastEthernet0/1
ip address 192.168.1.2 255.255.255.0
speed auto
full-duplex
no mop enabled
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.3.1.0 0.0.0.255 area 0
network 10.3.2.0 0.0.0.255 area 0
network 10.3.3.0 0.0.0.255 area 0
network 10.3.4.0 0.0.0.255 area 0
network 10.3.5.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.3 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 10.3.4.0 mask 255.255.255.0
network 10.3.5.0 mask 255.255.255.0
network 192.168.1.0
network 192.168.10.3 mask 255.255.255.255
aggregate-address 10.3.0.0 255.255.0.0 summary-only
neighbor 172.16.100.18 remote-as 200
neighbor 172.16.100.18 update-source Serial0/0
neighbor 172.16.100.18 route-map prove in
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
access-list 10 permit 10.6.0.0 0.0.255.255
!
route-map prove permit 10
match ip address 10
set local-preference 1000
!
route-map prove permit 20
!
line con 0
line aux 0
line vty 0 4
password cisco
login

</PRE>

=== Switch 1 ===

<PRE>

Current configuration : 1333 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW1
!
enable secret 5 $1$3BEJ$gjcaPkd2T6grrMreIYp0t0
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip http server
!
control-plane
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

</PRE>

=== Router 6 ===

=== Switch 2 ===

<PRE>
Current configuration : 2626 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW2
!
enable secret 5 $1$YqCY$l6FXVLpSE8p/mWoS5Lwn71
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 4
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
switchport mode trunk
!
interface Vlan1
ip address 192.168.99.12 255.255.255.0
no ip route-cache
!
interface Vlan2
no ip address
no ip route-cache
!
interface Vlan3
no ip address
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

=== Switch 3 ===

=== Switch 4 ===

<PRE>

Current configuration : 2587 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW4
!
enable secret 5 $1$rom0$uHDgDlJHC.sjIFOFVjJcV1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.99.14 255.255.255.0
!
interface Vlan2
no ip address
!
ip classless
ip http server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

</PRE>

CCNP øveuge

2009-03-27T11:02:41Z

Pederrs: /* Router 4 */

= CCNP øveuge =

[[Image:Øvelsesuge.png|thumb|none|1000px]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 2 ===
<PRE>

hostname R2
!
enable secret 5 $1$WQha$7yhAdoRtJxu.Pvc6iKObY.
enable password cisco
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface Loopback4
ip address 10.2.4.1 255.255.255.0
!
interface Loopback5
ip address 10.2.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.2 255.255.255.252
speed auto
full-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip helper-address 172.16.100.1
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.2.1.0 0.0.0.255 area 0
network 10.2.2.0 0.0.0.255 area 0
network 10.2.3.0 0.0.0.255 area 0
network 10.2.4.0 0.0.0.255 area 0
network 10.2.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.2 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 10.2.4.0 mask 255.255.255.0
network 10.2.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.1.0
network 192.168.10.2 mask 255.255.255.255
aggregate-address 10.2.0.0 255.255.0.0 summary-only
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 3 ===

=== Switch 1 ===

<PRE>

Current configuration : 1333 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW1
!
enable secret 5 $1$3BEJ$gjcaPkd2T6grrMreIYp0t0
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip http server
!
control-plane
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

=== Router 6 ===

=== Switch 2 ===

<PRE>
Current configuration : 2626 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW2
!
enable secret 5 $1$YqCY$l6FXVLpSE8p/mWoS5Lwn71
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 4
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
switchport mode trunk
!
interface Vlan1
ip address 192.168.99.12 255.255.255.0
no ip route-cache
!
interface Vlan2
no ip address
no ip route-cache
!
interface Vlan3
no ip address
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

=== Switch 3 ===

=== Switch 4 ===

<PRE>

Current configuration : 2587 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW4
!
enable secret 5 $1$rom0$uHDgDlJHC.sjIFOFVjJcV1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.99.14 255.255.255.0
!
interface Vlan2
no ip address
!
ip classless
ip http server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

</PRE>

CCNP øveuge

2009-03-27T11:00:55Z

Pederrs: /* Switch 1 */

CCNP øveuge

2009-03-27T10:57:47Z

Pederrs: /* Switch 4 */

CCNP øveuge

2009-03-27T10:56:49Z

Pederrs: /* Switch 2 */

File:Øvelsesuge1.png

2009-03-27T10:53:17Z

Pederrs:

CCNP øveuge

2009-03-27T10:40:51Z

Pederrs: /* CCNP øveuge */

= CCNP øveuge =

[[Image:Øvelsesuge.png|thumb|none|1000px]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

=== Router 2 ===

=== Router 3 ===

=== Switch 1 ===

== IS-IS netværk ==

=== Router 4 ===

=== Router 5 ===

=== Router 6 ===

=== Switch 2 ===

=== Switch 3 ===

=== Switch 4 ===

CCNP øveuge

2009-03-27T10:40:39Z

Pederrs: /* CCNP øveuge */

= CCNP øveuge =

[[Image:Øvelsesuge.png|thumb|none|800px]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

=== Router 2 ===

=== Router 3 ===

=== Switch 1 ===

== IS-IS netværk ==

=== Router 4 ===

=== Router 5 ===

=== Router 6 ===

=== Switch 2 ===

=== Switch 3 ===

=== Switch 4 ===

CCNP øveuge

2009-03-27T10:40:20Z

Pederrs: /* CCNP øveuge */

= CCNP øveuge =

[[Image:Øvelsesuge.png|thumb|none|600px]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

=== Router 2 ===

=== Router 3 ===

=== Switch 1 ===

== IS-IS netværk ==

=== Router 4 ===

=== Router 5 ===

=== Router 6 ===

=== Switch 2 ===

=== Switch 3 ===

=== Switch 4 ===

CCNP øveuge

2009-03-27T10:38:54Z

Pederrs: /* CCNP øveuge */

= CCNP øveuge =

[[Image:Øvelsesuge.png]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

=== Router 2 ===

=== Router 3 ===

=== Switch 1 ===

== IS-IS netværk ==

=== Router 4 ===

=== Router 5 ===

=== Router 6 ===

=== Switch 2 ===

=== Switch 3 ===

=== Switch 4 ===

File:Øvelsesuge.png

2009-03-27T10:37:51Z

Pederrs:

Pederrs CCNP 1

2009-02-27T11:16:04Z

Pederrs: /* Teori */

= Module 1: Scalable Network Design =

== Forkortelser: ==

'''ECNM''' = Enterprise Composite Network Model

'''NAC''' = Network Access Control (NAC) and

'''IBNS''' = Identity Based Network Services (IBNS)

= Module 2: EIGRP =

== Forkortelser: ==

'''AD''' = advertised distance (AD)

'''FD''' = feasible distance (FD)

'''AD og FD forklaring:'''
The lowest cost route is calculated by adding the cost between the next-hop router and the destination—referred to as the advertised distance (AD)—to the cost between the local router and the next-hop router. The sum of these costs is called the feasible distance (FD).

'''DUAL''' = Diffusing Update Algorithm (DUAL)

'''PDM''' = Protocol-dependent modules (PDMs) are responsible for network layer protocol-specific requirements. EIGRP supports IP,AppleTalk, and Novell NetWare. Each protocol has its own EIGRP module and operates independently from any of the others that may be running.

'''RTP''' = RTP is responsible for guaranteed ordered delivery and reception of EIGRP packets to all neighbors. RTP supports intermixed transmission of multicast and unicast packets. For efficiency, only certain EIGRP packets are transmitted reliably.

'''SRTT''' = (smoothed round-trip time): Average number of milliseconds it takes for an EIGRP packet to be sent to this neighbor and for the local router to receive an acknowledgment of that packet. This timer determines the retransmit interval, also known as the retransmission timeout (RTO).

'''RTO''' = (retransmission timeout): Amount of time, in milliseconds, that the router waits for an acknowledgment before retransmitting a reliable packet from the retransmission queue to a neighbor. If an EIGRP update, query, or reply is sent, a copy of the packet is queued. If the RTO expires before an acknowledgment is received, another copy of the queued packet is sent.

'''SIA''' = stuck in active (SIA)

'''LSDB''' = link-state database (LSDB)

'''SPF''' = Shortest Path First (SPF)

== Teori ==

Although the metric can be based on five criteria, EIGRP uses only two of these criteria by default:

*Bandwidth: Smallest bandwidth between source and destination.
*Delay: Cumulative interface delay along the path.

Three other criteria can be used, but are not recommended, because they typically result in frequent recalculation of the topology table:

*Reliability: Worst reliability between source and destination, based on keepalives.
*Loading: Worst load on a link between source and destination, based on the packet rate and the configured bandwidth of the interface.
*MTU: Smallest MTU in the path. MTU is included in the EIGRP routing update, but is not actually used in the metric calculation.

= Module 3: OSPF =

== Forkortelser: ==

== Teori ==

=== 3.1.1 Link State Routing Protocols ===

=== [[Image:CCNP-2.png]] ===

 

=== 3.1.3 Link State Data Structures ===

[[Image:CCNP-3.png]]

 

=== 3.1.6 Types of OSPF Routers ===

The four different types of OSPF routers are:

*Internal routers: Routers that have all their interfaces in the same area and have identical LSDBs.
*Backbone routers: Routers that sit on the perimeter of the backbone area and have at least one interface connected to area 0. Backbone routers maintain OSPF routing information using the same procedures and algorithms as internal routers.
*Area border routers: Routers that have interfaces attached to multiple areas, maintain separate LSDBs for each area to which they connect, and route traffic destined to or arriving from other areas. Area border routers (ABRs) are exit points for the area, which means that routing information destined for another area can get there only via the ABR of the local area. ABRs can be configured to summarize the routing information from the LSDBs of their attached areas. ABRs distribute the routing information into the backbone. The backbone routers then forward the information to the other ABRs. In a multiarea network, an area can have one or more ABRs.
*Autonomous System Boundary Routers: Routers that have at least one interface attached to an external internetwork (another autonomous system), such as a non-OSPF network. Autonomous system boundary routers (ASBRs) can import non-OSPF network information to the OSPF network and vice versa; this process is called route redistribution.

[[Image:CCNP-4.png]]

 

=== 3.1.9 Link-State Data Structures ===

When each router receives the LSU, it does the following:

*If the LSA does not already exist, the router adds the entry to its LSDB, sends a link-state acknowledgment (LSAck) back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists and the received LSA has the same sequence number, the router ignores the LSA entry.
*If the entry already exists but the LSA includes newer information (it has a higher sequence number), the router adds the entry to its LSDB, sends an LSAck back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists but the LSA includes older information, it sends an LSU to the sender with its newer information

[[Image:CCNP-8.png]]

 

=== 3.2.1 OSPF Packet Types ===

The OSPF protocol exchanges five packet types:

*Hello
*Database description (DBD)
*Link-state request (LSR)
*Link-state update (LSU)
*Link-state acknowledgement (LSAck)

[[Image:CCNP-5.png]]

 

=== 3.2.2 OSPF Packet Header Format ===

All five OSPF packets are encapsulated directly into an IP payload, as shown in Figure . The OSPF packet does not use TCP or User Datagram Protocol (UDP). OSPF requires a reliable packet transport scheme. Since TCP is not used, it has defined its own acknowledgment routine that uses an acknowledgment packet (OSPF packet type 5).

In the IP header, a protocol identifier of 89 defines all OSPF packets. Each of the OSPF packets begins with the same header format. This header has the following fields:

*Version number: For OSPF version 2 or 3
*Type: Differentiates the five OSPF packet types
*Packet length: Length of packet in bytes
*Router ID: Defines which router is the source of the packet
*Area ID: Defines the area where the packet originated
*Checksum: Used for packet-header error detection to ensure that the OSPF packet was not corrupted during transmission
*Authentication type: An option that specifies either no authentication, clear-text passwords, or encrypted Message Digest 5 (MD5) formats for router authentication
*Authentication: Used in the authentication scheme
*Data (for hello packet): Includes a list of known neighborsData (for DBD packet): Contains a summary of LSDB, which includes all known router *IDs and their last sequence number, among a number of other fields
*Data (for LSR packet): Contains the type of LSU needed and the router ID that has the needed LSU
*Data (for LSU packet): Contains the full LSA entries; multiple LSA entries can fit in one OSPF update packet
*Data (for LSAck packet): Is empty

[[Image:CCNP-9.png]]

 

=== 3.3.4 Configuring a Router ID ===

[[Image:CCNP-6.png]]

 

=== Verifying the OSPF Operation ===

[[Image:CCNP-7.png]]

 

=== 3.6.3 OSPF LSA Types (cont.) ===

'''Type 1'''
Every router generates router link advertisements for each area to which it belongs. A type 1 LSA describes the collective states of the directly connected links (interfaces) of the router. These LSAs are flooded only within the area in which they are originated.

'''Type 2'''
A type 2 LSA is generated for every transit broadcast and NBMA network within an area. A transit network has at least two directly attached OSPF routers. Ethernet is an example of a transit network.

The DR of the network is responsible for advertising the network LSA. A type 2 network LSA lists each of the attached routers that make up the transit network, including the DR itself, as well as the subnet mask used on the link. The type 2 LSA then floods to all routers within the transit network area. Type 2 LSAs never cross an area boundary. The link-state ID for a network LSA is the IP interface address of the DR that advertises it.

'''Type 3'''
The ABR sends type 3 summary LSAs. Type 3 LSAs advertise any networks owned by an area to the rest of the areas in the OSPF autonomous system, as shown in Figure .

The link-state ID is set to the network number; the mask is also advertised.

By default, OSPF does not automatically summarize groups of contiguous subnets or summarize a network to its classful boundary. The network operator uses configuration commands to specify how the summarization occurs. By default, a type 3 LSA is advertised into the backbone area for every subnet defined in the originating area, which can cause significant flooding problems. Consequently, you should always consider using manual route summarization at the ABR.

Summary LSAs are flooded throughout a single area only, but are regenerated by ABRs to flood into other areas.

Note
By default, summary LSAs do not contain summarized routes.

'''Type 4'''
A type 4 summary LSA is generated by an ABR only when an ASBR exists within an area. A type 4 LSA identifies the ASBR and provides a route to it. The link-state ID is set to the ASBR router ID. All traffic destined to an external autonomous system requires routing table knowledge of the ASBR that originated the external routes.

In Figure , the ASBR sends a type 1 router LSA with an external bit (e bit) that is set to identify itself as an ASBR. When the ABR, which is identified with a border bit (b bit) in the router LSA, receives the type 1 LSA, it builds a type 4 LSA and floods it to the backbone (area 0). Subsequent ABRs regenerate a type 4 LSA to flood into their areas.

'''Type 5'''
Type 5 external LSAs describe routes to networks outside the OSPF autonomous system. Type 5 LSAs are originated by the ASBR and are flooded to the entire autonomous system.

The link-state ID is the external network number. Because of the flooding scope, and depending on the number of external networks, the default lack of route summarization can be a major issue with external LSAs. Therefore, you should summarize blocks of external network numbers at the ASBR to reduce flooding problems.

'''Type 6'''
Type 6 LSAs are specialized LSAs that are used in multicast OSPF applications.

'''Type 7'''
Type 7 is an LSA type that is used in not-so-stubby areas (NSSAs). They are originated by ASBRs within NSSAs and are flooded only within the NSSA in which they originated.

'''Type 8'''
Type 8 is a specialized LSA that is used in internetworking OSPF and Border Gateway Protocol (BGP).

'''Types 9, 10, and 11'''
The opaque LSAs, types 9, 10, and 11, are designated for future upgrades to OSPF for application-specific purposes. For example, Cisco Systems uses opaque LSAs for Multiprotocol Label Switching (MPLS) with OSPF. Opaque LSAs are distributed using standard LSDB flooding mechanisms. Each type has a different flooding scope.

'''Standard area:''' Accepts link updates, route summaries, and external routes (the default).

'''Backbone area (transit area):''' The central entity to which all other areas connect to exchange and route information. The backbone area is labeled area 0. The OSPF backbone includes all the properties of a standard OSPF area.

'''Stub area:''' Does not accept information about routes external to the autonomous system, such as routes from non-OSPF sources. This means that no type 5 LSAs are known inside the area, and consequently type 4 LSAs are unnecessary. Type 4 and 5 LSAs are blocked.
ABRs at the edge of the stub area use type 3 LSAs to advertise a single default route (0.0.0.0) into the area. If routers need to route to networks outside the autonomous area, they use the default route.
Stub areas cannot contain ASBRs (except that the ABRs may also be ASBRs).

'''Totally stubby area:''' Does not accept external autonomous system routes or summary routes from other areas internal to the autonomous system. The ABR of the totally stubby area blocks type 4 and 5 LSAs as well as all summary LSAs (type 3), with an exception of a single type 3 LSA to advertise the default route.
The default route advertised by the ABR is used to reach destinations external to the autonomous system and all destinations external to the area. Therefore, if the router needs to send a packet to a network external to the area, it sends the packet using a default route.

Totally stubby areas cannot contain ASBRs (except that the ABRs may also be ASBRs).

'''Not-so-stubby area:''' An NSSA is an addendum to the OSPF RFC. It offers benefits that are similar to those of a stub or totally stubby area, but also allows external routes to be advertised into the OSPF autonomous system. Therefore, NSSAs allow ASBRs, which is against the rule in a stub area.
The ASBR originates type 7 LSAs to advertise the external destinations. The type 7 LSAs are flooded throughout the NSSA but are blocked by the ABR. The ABR converts the type 7 LSA into a type 5 LSA, which is then propagated through the remainder of the autonomous system.

= Module 4: Integrated IS-IS =

== Forkortelser ==

'''MPLS/TE''' = Multiprotocol Label Switching Traffic Engineering (MPLS/TE).

'''IGP''' = interior gateway protocol (IGP)

'''CLNS''' = Connectionless Network Service (CLNS)

'''CLNP''' = Connectionless Network Protocol (CLNP)

'''LSP''' = link-state packet (LSP)

'''PDU''' = protocol data unit (PDU)

'''IS''' = Intermediate System

'''ES''' = end system (ES)

'''ES-IS''' = End System-to-Intermediate System (ES-IS)

'''ESH''' = End System Hello (ESH)

'''ISH''' = Intermediate System Hello (ISH)

'''IIH''' = IS-IS Hello (IIH)

'''DIS''' = designated IS router (DIS)

'''NSAP''' = network service access points (NSAP)

'''NSEL''' = NSAP selector (NSEL)

'''IDP''' = initial domain part (IDP)

'''AFI''' = authority and format identifier (AFI)

'''IDI''' = initial domain identifier (IDI)

'''DSP''' = domain specific part (DSP)

'''HO-DSP''' = high-order DSP (HO-DSP)

'''SNPA''' = subnetwork point of attachment (SNPA)

'''CLV''' = Code, Length, Value (CLV)

'''SNP''' = Sequence number PDU (SNP)

'''PRC''' = partial route calculation (PRC)

'''Example of a net address:'''

For example, you might assign 49.0001.0000.0c12.3456.00, which represents the following:

AFI of 49
Area ID of 0001
System ID of 0000.0c12.3456, the MAC address of a LAN interface
NSEL of 0

== Teori ==

=== 4.1.2 IS-IS and OSPF ===

[[Image:CCNP-14.png]]

 
 

=== 4.1.4 IS-IS Features ===

[[Image:CCNP-15.png]]

 
 

=== 4.1.5 IS-IS Link-State Operation ===

[[Image:CCNP-16.png]]

 
 

=== 4.1.8 The ES-IS Protocol ===

[[Image:CCNP-17.png]]

 
 

=== 4.1.9 OSI Routing Levels ===

[[Image:CCNP-18.png]]

 
 

=== 4.1.10 IS-IS and OSPF Network Design ===

[[Image:CCNP-19.png]]

 
 

=== 4.1.11 Differences Between Integrated IS-IS and OSPF ===

[[Image:CCNP-20.png]]

 
 

=== 4.2.1 NSAP Addresses ===

[[Image:CCNP-141.png]]

 
 

=== 4.2.2 NSAP Address Structure ===

[[Image:CCNP-21.png]]

 
 

=== 4.2.3 NSAP Address Example ===

[[Image:CCNP-22.png]]

 
 

= Module 5: Route Optimization =

== Forkortelser ==

'''PBR''' = Policy-based routing (PBR)

== Teori ==

=== 5.1.4 Using Seed Metrics ===

[[Image:CCNP-25.png]]

 
 

=== 5.1.6 Defining Administrative Distance ===

[[Image:CCNP-26.png]]

 
 

=== 5.3.2 Passive Interfaces ===

[[Image:CCNP-27.png]]

 
 

=== 5.4.1 Defining Route Maps ===

[[Image:CCNP-28.png]]

 
 

=== 5.4.3 Route Map Operation ===

[[Image:CCNP-29.png]]

 

[[Image:CCNP-30.png]]

 
 

=== 5.4.4 Using Route Map Commands ===

[[Image:CCNP-31.png]]

 
 

=== 5.5.3 Configuring DHCP ===

[[Image:CCNP-32.png]]

 
 

= Module 6: BGP =

== Forkortelser ==
Protocols that run inside an enterprise are called interior gateway protocols (IGPs). Examples of IGPs include RIP versions 1 and 2, EIGRP, and OSPF.

Protocols that run outside an enterprise, or between autonomous systems, are called exterior gateway protocols (EGPs). Typically, EGPs are used to exchange routing information between Internet Service Providers (ISPs).

'''IGP''': Exchanges routing information within an autonomous system. RIP, IGRP, OSPF, IS-IS, and EIGRP are IGPs.

'''EGP''': Exchanges routing information between different autonomous systems. BGP is an EGP.

'''IDRP''' = BGP is an interdomain routing protocol (IDRP), also known as an EGP.

'''EBGP''' = When BGP is running between routers in different autonomous systems, it is called External BGP (EBGP).

'''IBGP''' = When BGP is running between routers in the same autonomous system, it is called Internal BGP (IBGP).

'''RIR''' = Regional Internet Registry (RIR)

'''FSM''' = finite-state machine (FSM)

== Teori ==

=== 6.1.2 BGP Multihoming Options ===

[[Image:CCNP-33.png]]

 
 

=== 6.1.6 BGP Routing Between Autonomous Systems ===

[[Image:CCNP-34.png]]

 
 

=== 6.1.7 Path-Vector Functionality ===

[[Image:CCNP-35.png]]

 
 

=== 6.1.9 Features of BGP ===

[[Image:CCNP-36.png]]

 
 

=== 6.1.10 BGP Databases ===

[[Image:CCNP-37.png]]

 
 

=== 6.1.11 BGP Message Types ===

[[Image:CCNP-38.png]]

 
 

=== 6.2.2 Establishing a Connection Between External BGP Neighbors ===

[[Image:CCNP-39.png]]

 
 

=== 6.2.3 Establishing a Connection Between Internal BGP Neighbors ===

[[Image:CCNP-40.png]]

 
 

=== 6.2.5 IBGP in a Nontransit Autonomous System ===

[[Image:CCNP-41.png]]

 
 

=== 6.2.6 Routing Issues in a Transit Autonomous System ===

[[Image:CCNP-42.png]]

 
 

=== 6.3.1 Basic BGP Configuration ===

[[Image:CCNP-43.png]]

 
 

=== 6.3.2 Activate a BGP Session ===

[[Image:CCNP-44.png]]

 
 

=== 6.3.3 Shutting Down a BGP Neighbor ===

[[Image:CCNP-45.png]]

 
 

=== 6.3.4 BGP Configuration Considerations ===

[[Image:CCNP-46.png]]

 
 

=== 6.3.5 IBGP Peering Issue ===

[[Image:CCNP-47.png]]

 
 

=== 6.3.6 BGP neighbor update-source Command ===

[[Image:CCNP-48.png]]

 

[[Image:CCNP-49.png]]

 
 

=== 6.3.7 EBGP Peering Issue (EBGP Multihop) ===

[[Image:CCNP-50.png]]

 
 

=== 6.3.8 Next Hop Behavior ===

[[Image:CCNP-51.png]]

 

[[Image:CCNP-52.png]]

 
 

=== 6.3.9 BGP neighbor next-hop-self Command ===

[[Image:CCNP-53.png]]

 
 

=== 6.3.10 Injection Routing Information into BGP ===

[[Image:CCNP-54.png]]

 
 

=== 6.3.12 BGP Synchronization ===

[[Image:CCNP-55.png]]

 
 

=== 6.3.13 BGP Synchronization Example ===

[[Image:CCNP-56.png]]

 

[[Image:CCNP-57.png]]

 
 

=== 6.4.1 BGP Neighbor States ===

[[Image:CCNP-58.png]]

 
 

=== 6.4.5 Configuring a Peer Group Example ===

[[Image:CCNP-59.png]]

 
 

=== 6.4.7 Configuring BGP Authentication ===

[[Image:CCNP-60.png]]

 
 

=== 6.4.11 Soft Reset of BGP Sessions ===

[[Image:CCNP-61.png]]

 

[[Image:CCNP-62.png]]

 

[[Image:CCNP-63.png]]

 
 

=== 6.5.3 AS Path Attribute ===

[[Image:CCNP-64.png]]

 
 

=== 6.5.4 Next-Hop Attribute ===

[[Image:CCNP-65.png]]

 
 

=== 6.5.5 Origin Attribute ===

[[Image:CCNP-66.png]]

 
 

=== 6.5.6 Local Preference Attribute ===

[[Image:CCNP-67.png]]

 
 

=== 6.5.7 MED Attribute ===

[[Image:CCNP-68.png]]

 
 

=== 6.5.8 Weight Attribute ===

[[Image:CCNP-69.png]]

 
 

=== 6.5.10 Selecting a BGP Path ===

[[Image:CCNP-70.png]]

 
 

=== 6.6.3 Changing the BGP Local Preference for All Routes ===

[[Image:CCNP-71.png]]

 
 

=== 6.6.7 Setting the MED with Route Maps ===

[[Image:CCNP-73.png]]

 

= Module 7: IP Multicasting =

== Forkortelser ==

VoD = video on demand [VoD]

UDP = User Datagram Protocol (UDP)

Locally scoped (reserved link local) addresses
Reserved by the Internet Assigned Numbers Authority (IANA) for network protocol use.
Address range is from 224.0.0.0 through 224.0.0.255.
Multicasts in this range are never forwarded off the local network, regardless of Time to Live (TTL). Usually, the TTL is set to 1.

Globally scoped addresses
Allocated dynamically throughout the Internet.
Address range is from 224.0.1.0 through 238.255.255.255.
The 224.2.X.X range is used in Multicast Backbone (Mbone) applications. Established by the Internet Engineering Task Force (IETF) to multicast audio and video meetings, Mbone is a collection of Internet routers that support IP multicasting on which various public and private audio and video programs are sent.

Limited (administratively) scoped addresses
Reserved for use inside private domains. Similar to the private IP address space that is used within the boundaries of a single organization, limited or administratively scoped addresses are constrained to a local group or organization.
Address range is from 239.0.0.0 through 239.255.255.255.
Organizations can use limited scope addresses to have local multicast applications that will not be forwarded over the Internet.

SDP = Session Description Protocol (SDP)

SAP = Session Announcement Protocol (SAP)

SDR = Both the sd application and SDP are sometimes called SDR or sdr. In Cisco documentation, SDP/SAP is referred to as sdr.

SIP = Session Initiation Protocol (SIP)

RTSP = Real Time Streaming Protocol (RTSP)

IGMP = Internet Group Management Protocol (IGMP)

CGMP = Cisco Group Management Protocol (CGMP)

ASIC = application-specific integrated circuit (ASIC)

CAM = content-addressable memory (CAM)

SPT = shortest path tree (SPT)

RP = rendezvous point (RP)

PIM = Protocol-Independent Multicast (PIM)

RPF = Reverse Path Forwarding (RPF)

SSM = Source Specific Multicast (SSM)

MSDP = Multicast Source Discovery Protocol [MSDP]

OIL = outgoing interface list (OIL)

DVMRP = Distance Vector Multicast Routing Protocol (DVMRP)

== Teori ==

=== 7.1.3 Multicast Advantages and Disadvantages ===

[[Image:CCNP-75.png]]

 
 

=== 7.1.4 Multicast Applications ===

[[Image:CCNP-76.png]]

 
 

=== 7.1.5 IP Multicast Addresses ===

[[Image:CCNP-77.png]]

 

[[Image:CCNP-78.png]]

 

[[Image:CCNP-79.png]]

 
 

=== 7.1.6 Layer 2 Multicast Addressing ===

[[Image:CCNP-80.png]]

 
 

=== 7.2.2 IGMPv2 Join Group and Leave Group Messages ===

[[Image:CCNP-81.png]]

 
 

=== 7.2.3 Introducing IGMPv3 ===

[[Image:CCNP-82.png]]

 
 

=== 7.2.5 Multicast in the Layer 2 Switching Environment ===

[[Image:CCNP-83.png]]

 
 

=== 7.2.6 Multicast in Layer 2 Solutions ===

[[Image:CCNP-84.png]]

 
 

=== 7.2.7 Cisco Group Management Protocol (CGMP) ===

[[Image:CCNP-85.png]]

 
 

=== 7.2.8 IGMP Snooping ===

[[Image:CCNP-86.png]]

 
 

=== 7.3.1 Protocols Used in Multicast ===

[[Image:CCNP-87.png]]

 
 

=== 7.3.2 Multicast Distribution Trees ===

[[Image:CCNP-88.png]]

 

[[Image:CCNP-89.png]]

 
 

=== 7.3.3 Multicast Distribution Trees Identification ===

[[Image:CCNP-90.png]]

 
 

=== 7.3.4 IP Multicast Routing ===

[[Image:CCNP-91.png]]

 
 

=== 7.3.5 Protocol-Independent Multicast: Describing PIM-DM ===

[[Image:CCNP-92.png]]

 

[[Image:CCNP-93.png]]

 

[[Image:CCNP-94.png]]

 
 

=== 7.3.6 Protocol-Independent Multicast: Describing PIM-SM ===

[[Image:CCNP-95.png]]

 

[[Image:CCNP-96.png]]

 
 

=== 7.4.1 Enabling PIM Sparse Mode and Sparse-Dense Mode ===

[[Image:CCNP-99.png]]

 
 

=== 7.4.2 Inspecting the Multicast Routing Table ===

[[Image:CCNP-100.png]]

 
 

=== 7.4.3 Finding PIM Neighbors ===

[[Image:CCNP-101.png]]

 
 

=== 7.4.4 Checking RP Information ===

[[Image:CCNP-102.png]]

 
 

=== 7.4.5 Checking the Group State ===

[[Image:CCNP-103.png]]

 
 

=== 7.4.6 Configuring a Router to Be a Member of a Group ===

[[Image:CCNP-104.png]]

 

= Module 8: IPv6 =

== Forkortelser ==

'''RSVP''' = Reservation Protocol [RSVP]

'''MLDv1''' = Multicast Listener Discovery version 1 [MLDv1]

'''DAD''' = duplicate address detection (DAD)

'''RIPng''' = Routing Information Protocol next generation

'''RIB''' = Routing Information Base (RIB).

'''ISATAP''' = Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)

'''NAT-PT''' = NAT-Protocol Translation (NAT-PT)

'''The IPv6 header contains these fields:'''

*'''Version:''' 4-bit field, the same as in IPv4. It contains the number 6 instead of the number 4 for IPv4.
*'''Traffic Class:''' 8-bit field similar to the type of service (ToS) field in IPv4. It tags the packet with a traffic class that it uses in Differentiated Services (DiffServ). These functionalities are the same for IPv6 and IPv4.
*'''Flow Label:''' 20-bit field that allows a particular flow of traffic to be labeled. It can be used for multilayer switching techniques and faster packet-switching performance.
*'''Payload Length:''' Similar to the Total Length field in IPv4. It specifies the length of the payload, in bytes, that the packet is encapsulating.
*'''Next Header:''' Specifies which header follows the IPv6 packet header. It can be a transport-layer packet, such as TCP or UDP, or it can be an extension header. This field is similar to the Protocol field in IPv4.
*'''Hop Limit:''' Specifies the maximum number of hops that an IP packet can traverse. Each hop or router decreases this field by one (similar to the Time to Live [TTL] field in IPv4). Because there is no checksum in the IPv6 header, the router can decrease the field without recomputing the checksum. Recomputation costs valuable processing time on IPv4 routers.
*'''Source Address:''' This field has 16 octets or 128 bits. It identifies the source of the packet.
*'''Destination Address:''' This field has 16 octets or 128 bits. It identifies the destination of the packet.
*'''Extension Headers:''' Follows the previous eight fields. The number of extension headers is not fixed, so the total length of the extension header chain is variable.

== Teori ==

=== 8.1.2 IPv6 Features ===

[[Image:CCNP-105.png]]

 
 

=== 8.1.3 Large Address Space ===

[[Image:CCNP-106.png]]

 
 

=== 8.2.1 IPv6 Addressing Architecture ===

[[Image:CCNP-107.png]]

 
 

=== 8.2.2 Comparing IPv4 and IPv6 Headers ===

[[Image:CCNP-108.png]]

 
 

=== 8.2.3 IPv6 Extension Headers ===

[[Image:CCNP-109.png]]

 
 

=== 8.2.4 Defining Address Representation ===

[[Image:CCNP-110.png]]

 
 

=== 8.2.5 IPv6 Address Types ===

[[Image:CCNP-111.png]]

 

[[Image:CCNP-112.png]]

 

[[Image:CCNP-113.png]]

 
 

=== 8.2.6 IPv6 Global Unicast and Anycast Addresses ===

[[Image:CCNP-114.png]]

 
 

=== 8.3.1 Defining Host Interface Addresses ===

[[Image:CCNP-115.png]]

 
 

=== 8.3.2 Link Local Address ===

[[Image:CCNP-116.png]]

 
 

=== 8.3.3 Stateless Autoconfiguration 8.3.4 ===

[[Image:CCNP-117.png]]

 
 

=== EUI-64 to IPv6 Identifier ===

[[Image:CCNP-118.png]]

 
 

=== ===

[[Image:CCNP-119.png]]

 
 

=== ===

[[Image:CCNP-120.png]]

 
 

=== ===

[[Image:CCNP-121.png]]

 
 

=== ===

[[Image:CCNP-122.png]]

 
 

=== ===

[[Image:CCNP-123.png]]

 
 

=== ===

[[Image:CCNP-124.png]]

 
 

=== ===

[[Image:CCNP-125.png]]

 
 

=== ===

[[Image:CCNP-126.png]]

 
 

=== ===

[[Image:CCNP-127.png]]

 
 

=== ===

[[Image:CCNP-128.png]]

 
 

=== ===

[[Image:CCNP-129.png]]

 
 

=== ===

[[Image:CCNP-130.png]]

 
 

=== ===

[[Image:CCNP-131.png]]

 
 

=== ===

[[Image:CCNP-132.png]]

 
 

=== ===

[[Image:CCNP-133.png]]

 
 

=== ===

[[Image:CCNP-134.png]]

 
 

=== ===

[[Image:CCNP-135.png]]

 
 

=== ===

[[Image:CCNP-136.png]]

 
 

=== ===

[[Image:CCNP-137.png]]

 
 

=== ===

[[Image:CCNP-138.png]]

 
 

=== ===

[[Image:CCNP-139.png]]

 
 

=== ===

[[Image:CCNP-140.png]]

Pederrs CCNP 1

2009-02-27T10:13:56Z

Pederrs: /* Teori */

= Module 1: Scalable Network Design =

== Forkortelser: ==

'''ECNM''' = Enterprise Composite Network Model

'''NAC''' = Network Access Control (NAC) and

'''IBNS''' = Identity Based Network Services (IBNS)

= Module 2: EIGRP =

== Forkortelser: ==

'''AD''' = advertised distance (AD)

'''FD''' = feasible distance (FD)

'''AD og FD forklaring:'''
The lowest cost route is calculated by adding the cost between the next-hop router and the destination—referred to as the advertised distance (AD)—to the cost between the local router and the next-hop router. The sum of these costs is called the feasible distance (FD).

'''DUAL''' = Diffusing Update Algorithm (DUAL)

'''PDM''' = Protocol-dependent modules (PDMs) are responsible for network layer protocol-specific requirements. EIGRP supports IP,AppleTalk, and Novell NetWare. Each protocol has its own EIGRP module and operates independently from any of the others that may be running.

'''RTP''' = RTP is responsible for guaranteed ordered delivery and reception of EIGRP packets to all neighbors. RTP supports intermixed transmission of multicast and unicast packets. For efficiency, only certain EIGRP packets are transmitted reliably.

'''SRTT''' = (smoothed round-trip time): Average number of milliseconds it takes for an EIGRP packet to be sent to this neighbor and for the local router to receive an acknowledgment of that packet. This timer determines the retransmit interval, also known as the retransmission timeout (RTO).

'''RTO''' = (retransmission timeout): Amount of time, in milliseconds, that the router waits for an acknowledgment before retransmitting a reliable packet from the retransmission queue to a neighbor. If an EIGRP update, query, or reply is sent, a copy of the packet is queued. If the RTO expires before an acknowledgment is received, another copy of the queued packet is sent.

'''SIA''' = stuck in active (SIA)

'''LSDB''' = link-state database (LSDB)

'''SPF''' = Shortest Path First (SPF)

== Teori ==

Although the metric can be based on five criteria, EIGRP uses only two of these criteria by default:

*Bandwidth: Smallest bandwidth between source and destination.
*Delay: Cumulative interface delay along the path.

Three other criteria can be used, but are not recommended, because they typically result in frequent recalculation of the topology table:

*Reliability: Worst reliability between source and destination, based on keepalives.
*Loading: Worst load on a link between source and destination, based on the packet rate and the configured bandwidth of the interface.
*MTU: Smallest MTU in the path. MTU is included in the EIGRP routing update, but is not actually used in the metric calculation.

= Module 3: OSPF =

== Forkortelser: ==

== Teori ==

=== 3.1.1 Link State Routing Protocols ===

=== [[Image:CCNP-2.png]] ===

 

=== 3.1.3 Link State Data Structures ===

[[Image:CCNP-3.png]]

 

=== 3.1.6 Types of OSPF Routers ===

The four different types of OSPF routers are:

*Internal routers: Routers that have all their interfaces in the same area and have identical LSDBs.
*Backbone routers: Routers that sit on the perimeter of the backbone area and have at least one interface connected to area 0. Backbone routers maintain OSPF routing information using the same procedures and algorithms as internal routers.
*Area border routers: Routers that have interfaces attached to multiple areas, maintain separate LSDBs for each area to which they connect, and route traffic destined to or arriving from other areas. Area border routers (ABRs) are exit points for the area, which means that routing information destined for another area can get there only via the ABR of the local area. ABRs can be configured to summarize the routing information from the LSDBs of their attached areas. ABRs distribute the routing information into the backbone. The backbone routers then forward the information to the other ABRs. In a multiarea network, an area can have one or more ABRs.
*Autonomous System Boundary Routers: Routers that have at least one interface attached to an external internetwork (another autonomous system), such as a non-OSPF network. Autonomous system boundary routers (ASBRs) can import non-OSPF network information to the OSPF network and vice versa; this process is called route redistribution.

[[Image:CCNP-4.png]]

 

=== 3.1.9 Link-State Data Structures ===

When each router receives the LSU, it does the following:

*If the LSA does not already exist, the router adds the entry to its LSDB, sends a link-state acknowledgment (LSAck) back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists and the received LSA has the same sequence number, the router ignores the LSA entry.
*If the entry already exists but the LSA includes newer information (it has a higher sequence number), the router adds the entry to its LSDB, sends an LSAck back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists but the LSA includes older information, it sends an LSU to the sender with its newer information

[[Image:CCNP-8.png]]

 

=== 3.2.1 OSPF Packet Types ===

The OSPF protocol exchanges five packet types:

*Hello
*Database description (DBD)
*Link-state request (LSR)
*Link-state update (LSU)
*Link-state acknowledgement (LSAck)

[[Image:CCNP-5.png]]

 

=== 3.2.2 OSPF Packet Header Format ===

All five OSPF packets are encapsulated directly into an IP payload, as shown in Figure . The OSPF packet does not use TCP or User Datagram Protocol (UDP). OSPF requires a reliable packet transport scheme. Since TCP is not used, it has defined its own acknowledgment routine that uses an acknowledgment packet (OSPF packet type 5).

In the IP header, a protocol identifier of 89 defines all OSPF packets. Each of the OSPF packets begins with the same header format. This header has the following fields:

*Version number: For OSPF version 2 or 3
*Type: Differentiates the five OSPF packet types
*Packet length: Length of packet in bytes
*Router ID: Defines which router is the source of the packet
*Area ID: Defines the area where the packet originated
*Checksum: Used for packet-header error detection to ensure that the OSPF packet was not corrupted during transmission
*Authentication type: An option that specifies either no authentication, clear-text passwords, or encrypted Message Digest 5 (MD5) formats for router authentication
*Authentication: Used in the authentication scheme
*Data (for hello packet): Includes a list of known neighborsData (for DBD packet): Contains a summary of LSDB, which includes all known router *IDs and their last sequence number, among a number of other fields
*Data (for LSR packet): Contains the type of LSU needed and the router ID that has the needed LSU
*Data (for LSU packet): Contains the full LSA entries; multiple LSA entries can fit in one OSPF update packet
*Data (for LSAck packet): Is empty

[[Image:CCNP-9.png]]

 

=== 3.3.4 Configuring a Router ID ===

[[Image:CCNP-6.png]]

 

=== Verifying the OSPF Operation ===

[[Image:CCNP-7.png]]

 

=== 3.6.3 OSPF LSA Types (cont.) ===

'''Type 1'''
Every router generates router link advertisements for each area to which it belongs. A type 1 LSA describes the collective states of the directly connected links (interfaces) of the router. These LSAs are flooded only within the area in which they are originated.

'''Type 2'''
A type 2 LSA is generated for every transit broadcast and NBMA network within an area. A transit network has at least two directly attached OSPF routers. Ethernet is an example of a transit network.

The DR of the network is responsible for advertising the network LSA. A type 2 network LSA lists each of the attached routers that make up the transit network, including the DR itself, as well as the subnet mask used on the link. The type 2 LSA then floods to all routers within the transit network area. Type 2 LSAs never cross an area boundary. The link-state ID for a network LSA is the IP interface address of the DR that advertises it.

'''Type 3'''
The ABR sends type 3 summary LSAs. Type 3 LSAs advertise any networks owned by an area to the rest of the areas in the OSPF autonomous system, as shown in Figure .

The link-state ID is set to the network number; the mask is also advertised.

By default, OSPF does not automatically summarize groups of contiguous subnets or summarize a network to its classful boundary. The network operator uses configuration commands to specify how the summarization occurs. By default, a type 3 LSA is advertised into the backbone area for every subnet defined in the originating area, which can cause significant flooding problems. Consequently, you should always consider using manual route summarization at the ABR.

Summary LSAs are flooded throughout a single area only, but are regenerated by ABRs to flood into other areas.

Note
By default, summary LSAs do not contain summarized routes.

'''Type 4'''
A type 4 summary LSA is generated by an ABR only when an ASBR exists within an area. A type 4 LSA identifies the ASBR and provides a route to it. The link-state ID is set to the ASBR router ID. All traffic destined to an external autonomous system requires routing table knowledge of the ASBR that originated the external routes.

In Figure , the ASBR sends a type 1 router LSA with an external bit (e bit) that is set to identify itself as an ASBR. When the ABR, which is identified with a border bit (b bit) in the router LSA, receives the type 1 LSA, it builds a type 4 LSA and floods it to the backbone (area 0). Subsequent ABRs regenerate a type 4 LSA to flood into their areas.

'''Type 5'''
Type 5 external LSAs describe routes to networks outside the OSPF autonomous system. Type 5 LSAs are originated by the ASBR and are flooded to the entire autonomous system.

The link-state ID is the external network number. Because of the flooding scope, and depending on the number of external networks, the default lack of route summarization can be a major issue with external LSAs. Therefore, you should summarize blocks of external network numbers at the ASBR to reduce flooding problems.

'''Type 6'''
Type 6 LSAs are specialized LSAs that are used in multicast OSPF applications.

'''Type 7'''
Type 7 is an LSA type that is used in not-so-stubby areas (NSSAs). They are originated by ASBRs within NSSAs and are flooded only within the NSSA in which they originated.

'''Type 8'''
Type 8 is a specialized LSA that is used in internetworking OSPF and Border Gateway Protocol (BGP).

'''Types 9, 10, and 11'''
The opaque LSAs, types 9, 10, and 11, are designated for future upgrades to OSPF for application-specific purposes. For example, Cisco Systems uses opaque LSAs for Multiprotocol Label Switching (MPLS) with OSPF. Opaque LSAs are distributed using standard LSDB flooding mechanisms. Each type has a different flooding scope.

'''Standard area:''' Accepts link updates, route summaries, and external routes (the default).

'''Backbone area (transit area):''' The central entity to which all other areas connect to exchange and route information. The backbone area is labeled area 0. The OSPF backbone includes all the properties of a standard OSPF area.

'''Stub area:''' Does not accept information about routes external to the autonomous system, such as routes from non-OSPF sources. This means that no type 5 LSAs are known inside the area, and consequently type 4 LSAs are unnecessary. Type 4 and 5 LSAs are blocked.
ABRs at the edge of the stub area use type 3 LSAs to advertise a single default route (0.0.0.0) into the area. If routers need to route to networks outside the autonomous area, they use the default route.
Stub areas cannot contain ASBRs (except that the ABRs may also be ASBRs).

'''Totally stubby area:''' Does not accept external autonomous system routes or summary routes from other areas internal to the autonomous system. The ABR of the totally stubby area blocks type 4 and 5 LSAs as well as all summary LSAs (type 3), with an exception of a single type 3 LSA to advertise the default route.
The default route advertised by the ABR is used to reach destinations external to the autonomous system and all destinations external to the area. Therefore, if the router needs to send a packet to a network external to the area, it sends the packet using a default route.

Totally stubby areas cannot contain ASBRs (except that the ABRs may also be ASBRs).

'''Not-so-stubby area:''' An NSSA is an addendum to the OSPF RFC. It offers benefits that are similar to those of a stub or totally stubby area, but also allows external routes to be advertised into the OSPF autonomous system. Therefore, NSSAs allow ASBRs, which is against the rule in a stub area.
The ASBR originates type 7 LSAs to advertise the external destinations. The type 7 LSAs are flooded throughout the NSSA but are blocked by the ABR. The ABR converts the type 7 LSA into a type 5 LSA, which is then propagated through the remainder of the autonomous system.

= Module 4: Integrated IS-IS =

== Forkortelser ==

'''MPLS/TE''' = Multiprotocol Label Switching Traffic Engineering (MPLS/TE).

'''IGP''' = interior gateway protocol (IGP)

'''CLNS''' = Connectionless Network Service (CLNS)

'''CLNP''' = Connectionless Network Protocol (CLNP)

'''LSP''' = link-state packet (LSP)

'''PDU''' = protocol data unit (PDU)

'''IS''' = Intermediate System

'''ES''' = end system (ES)

'''ES-IS''' = End System-to-Intermediate System (ES-IS)

'''ESH''' = End System Hello (ESH)

'''ISH''' = Intermediate System Hello (ISH)

'''IIH''' = IS-IS Hello (IIH)

'''DIS''' = designated IS router (DIS)

'''NSAP''' = network service access points (NSAP)

'''NSEL''' = NSAP selector (NSEL)

'''IDP''' = initial domain part (IDP)

'''AFI''' = authority and format identifier (AFI)

'''IDI''' = initial domain identifier (IDI)

'''DSP''' = domain specific part (DSP)

'''HO-DSP''' = high-order DSP (HO-DSP)

'''SNPA''' = subnetwork point of attachment (SNPA)

'''CLV''' = Code, Length, Value (CLV)

'''SNP''' = Sequence number PDU (SNP)

'''PRC''' = partial route calculation (PRC)

'''Example of a net address:'''

For example, you might assign 49.0001.0000.0c12.3456.00, which represents the following:

AFI of 49
Area ID of 0001
System ID of 0000.0c12.3456, the MAC address of a LAN interface
NSEL of 0

== Teori ==

=== 4.1.2 IS-IS and OSPF ===

[[Image:CCNP-14.png]]

 
 

=== 4.1.4 IS-IS Features ===

[[Image:CCNP-15.png]]

 
 

=== 4.1.5 IS-IS Link-State Operation ===

[[Image:CCNP-16.png]]

 
 

=== 4.1.8 The ES-IS Protocol ===

[[Image:CCNP-17.png]]

 
 

=== 4.1.9 OSI Routing Levels ===

[[Image:CCNP-18.png]]

 
 

=== 4.1.10 IS-IS and OSPF Network Design ===

[[Image:CCNP-19.png]]

 
 

=== 4.1.11 Differences Between Integrated IS-IS and OSPF ===

[[Image:CCNP-20.png]]

 
 

=== 4.2.1 NSAP Addresses ===

[[Image:CCNP-141.png]]

 
 

=== 4.2.2 NSAP Address Structure ===

[[Image:CCNP-21.png]]

 
 

=== 4.2.3 NSAP Address Example ===

[[Image:CCNP-22.png]]

 
 

= Module 5: Route Optimization =

== Forkortelser ==

'''PBR''' = Policy-based routing (PBR)

== Teori ==

=== 5.1.4 Using Seed Metrics ===

[[Image:CCNP-25.png]]

 
 

=== 5.1.6 Defining Administrative Distance ===

[[Image:CCNP-26.png]]

 
 

=== 5.3.2 Passive Interfaces ===

[[Image:CCNP-27.png]]

 
 

=== 5.4.1 Defining Route Maps ===

[[Image:CCNP-28.png]]

 
 

=== 5.4.3 Route Map Operation ===

[[Image:CCNP-29.png]]

 

[[Image:CCNP-30.png]]

 
 

=== 5.4.4 Using Route Map Commands ===

[[Image:CCNP-31.png]]

 
 

=== 5.5.3 Configuring DHCP ===

[[Image:CCNP-32.png]]

 
 

= Module 6: BGP =

== Forkortelser ==
Protocols that run inside an enterprise are called interior gateway protocols (IGPs). Examples of IGPs include RIP versions 1 and 2, EIGRP, and OSPF.

Protocols that run outside an enterprise, or between autonomous systems, are called exterior gateway protocols (EGPs). Typically, EGPs are used to exchange routing information between Internet Service Providers (ISPs).

'''IGP''': Exchanges routing information within an autonomous system. RIP, IGRP, OSPF, IS-IS, and EIGRP are IGPs.

'''EGP''': Exchanges routing information between different autonomous systems. BGP is an EGP.

'''IDRP''' = BGP is an interdomain routing protocol (IDRP), also known as an EGP.

'''EBGP''' = When BGP is running between routers in different autonomous systems, it is called External BGP (EBGP).

'''IBGP''' = When BGP is running between routers in the same autonomous system, it is called Internal BGP (IBGP).

'''RIR''' = Regional Internet Registry (RIR)

'''FSM''' = finite-state machine (FSM)

== Teori ==

=== 6.1.2 BGP Multihoming Options ===

[[Image:CCNP-33.png]]

 
 

=== 6.1.6 BGP Routing Between Autonomous Systems ===

[[Image:CCNP-34.png]]

 
 

=== 6.1.7 Path-Vector Functionality ===

[[Image:CCNP-35.png]]

 
 

=== 6.1.9 Features of BGP ===

[[Image:CCNP-36.png]]

 
 

=== 6.1.10 BGP Databases ===

[[Image:CCNP-37.png]]

 
 

=== 6.1.11 BGP Message Types ===

[[Image:CCNP-38.png]]

 
 

=== 6.2.2 Establishing a Connection Between External BGP Neighbors ===

[[Image:CCNP-39.png]]

 
 

=== 6.2.3 Establishing a Connection Between Internal BGP Neighbors ===

[[Image:CCNP-40.png]]

 
 

=== 6.2.5 IBGP in a Nontransit Autonomous System ===

[[Image:CCNP-41.png]]

 
 

=== 6.2.6 Routing Issues in a Transit Autonomous System ===

[[Image:CCNP-42.png]]

 
 

=== 6.3.1 Basic BGP Configuration ===

[[Image:CCNP-43.png]]

 
 

=== 6.3.2 Activate a BGP Session ===

[[Image:CCNP-44.png]]

 
 

=== 6.3.3 Shutting Down a BGP Neighbor ===

[[Image:CCNP-45.png]]

 
 

=== 6.3.4 BGP Configuration Considerations ===

[[Image:CCNP-46.png]]

 
 

=== 6.3.5 IBGP Peering Issue ===

[[Image:CCNP-47.png]]

 
 

=== 6.3.6 BGP neighbor update-source Command ===

[[Image:CCNP-48.png]]

 

[[Image:CCNP-49.png]]

 
 

=== 6.3.7 EBGP Peering Issue (EBGP Multihop) ===

[[Image:CCNP-50.png]]

 
 

=== 6.3.8 Next Hop Behavior ===

[[Image:CCNP-51.png]]

 

[[Image:CCNP-52.png]]

 
 

=== 6.3.9 BGP neighbor next-hop-self Command ===

[[Image:CCNP-53.png]]

 
 

=== 6.3.10 Injection Routing Information into BGP ===

[[Image:CCNP-54.png]]

 
 

=== 6.3.12 BGP Synchronization ===

[[Image:CCNP-55.png]]

 
 

=== 6.3.13 BGP Synchronization Example ===

[[Image:CCNP-56.png]]

 

[[Image:CCNP-57.png]]

 
 

=== 6.4.1 BGP Neighbor States ===

[[Image:CCNP-58.png]]

 
 

=== 6.4.5 Configuring a Peer Group Example ===

[[Image:CCNP-59.png]]

 
 

=== 6.4.7 Configuring BGP Authentication ===

[[Image:CCNP-60.png]]

 
 

=== 6.4.11 Soft Reset of BGP Sessions ===

[[Image:CCNP-61.png]]

 

[[Image:CCNP-62.png]]

 

[[Image:CCNP-63.png]]

 
 

=== 6.5.3 AS Path Attribute ===

[[Image:CCNP-64.png]]

 
 

=== 6.5.4 Next-Hop Attribute ===

[[Image:CCNP-65.png]]

 
 

=== 6.5.5 Origin Attribute ===

[[Image:CCNP-66.png]]

 
 

=== 6.5.6 Local Preference Attribute ===

[[Image:CCNP-67.png]]

 
 

=== 6.5.7 MED Attribute ===

[[Image:CCNP-68.png]]

 
 

=== 6.5.8 Weight Attribute ===

[[Image:CCNP-69.png]]

 
 

=== 6.5.10 Selecting a BGP Path ===

[[Image:CCNP-70.png]]

 
 

=== 6.6.3 Changing the BGP Local Preference for All Routes ===

[[Image:CCNP-71.png]]

 
 

=== 6.6.7 Setting the MED with Route Maps ===

[[Image:CCNP-73.png]]

 

= Module 7: IP Multicasting =

== Forkortelser ==

VoD = video on demand [VoD]

UDP = User Datagram Protocol (UDP)

Locally scoped (reserved link local) addresses
Reserved by the Internet Assigned Numbers Authority (IANA) for network protocol use.
Address range is from 224.0.0.0 through 224.0.0.255.
Multicasts in this range are never forwarded off the local network, regardless of Time to Live (TTL). Usually, the TTL is set to 1.

Globally scoped addresses
Allocated dynamically throughout the Internet.
Address range is from 224.0.1.0 through 238.255.255.255.
The 224.2.X.X range is used in Multicast Backbone (Mbone) applications. Established by the Internet Engineering Task Force (IETF) to multicast audio and video meetings, Mbone is a collection of Internet routers that support IP multicasting on which various public and private audio and video programs are sent.

Limited (administratively) scoped addresses
Reserved for use inside private domains. Similar to the private IP address space that is used within the boundaries of a single organization, limited or administratively scoped addresses are constrained to a local group or organization.
Address range is from 239.0.0.0 through 239.255.255.255.
Organizations can use limited scope addresses to have local multicast applications that will not be forwarded over the Internet.

SDP = Session Description Protocol (SDP)

SAP = Session Announcement Protocol (SAP)

SDR = Both the sd application and SDP are sometimes called SDR or sdr. In Cisco documentation, SDP/SAP is referred to as sdr.

SIP = Session Initiation Protocol (SIP)

RTSP = Real Time Streaming Protocol (RTSP)

IGMP = Internet Group Management Protocol (IGMP)

CGMP = Cisco Group Management Protocol (CGMP)

ASIC = application-specific integrated circuit (ASIC)

CAM = content-addressable memory (CAM)

SPT = shortest path tree (SPT)

RP = rendezvous point (RP)

PIM = Protocol-Independent Multicast (PIM)

RPF = Reverse Path Forwarding (RPF)

SSM = Source Specific Multicast (SSM)

MSDP = Multicast Source Discovery Protocol [MSDP]

OIL = outgoing interface list (OIL)

DVMRP = Distance Vector Multicast Routing Protocol (DVMRP)

== Teori ==

=== 7.1.3 Multicast Advantages and Disadvantages ===

[[Image:CCNP-75.png]]

 
 

=== 7.1.4 Multicast Applications ===

[[Image:CCNP-76.png]]

 
 

=== 7.1.5 IP Multicast Addresses ===

[[Image:CCNP-77.png]]

 

[[Image:CCNP-78.png]]

 

[[Image:CCNP-79.png]]

 
 

=== 7.1.6 Layer 2 Multicast Addressing ===

[[Image:CCNP-80.png]]

 
 

=== 7.2.2 IGMPv2 Join Group and Leave Group Messages ===

[[Image:CCNP-81.png]]

 
 

=== 7.2.3 Introducing IGMPv3 ===

[[Image:CCNP-82.png]]

 
 

=== 7.2.5 Multicast in the Layer 2 Switching Environment ===

[[Image:CCNP-83.png]]

 
 

=== 7.2.6 Multicast in Layer 2 Solutions ===

[[Image:CCNP-84.png]]

 
 

=== 7.2.7 Cisco Group Management Protocol (CGMP) ===

[[Image:CCNP-85.png]]

 
 

=== 7.2.8 IGMP Snooping ===

[[Image:CCNP-86.png]]

 
 

=== 7.3.1 Protocols Used in Multicast ===

[[Image:CCNP-87.png]]

 
 

=== 7.3.2 Multicast Distribution Trees ===

[[Image:CCNP-88.png]]

 

[[Image:CCNP-89.png]]

 
 

=== 7.3.3 Multicast Distribution Trees Identification ===

[[Image:CCNP-90.png]]

 
 

=== 7.3.4 IP Multicast Routing ===

[[Image:CCNP-91.png]]

 
 

=== 7.3.5 Protocol-Independent Multicast: Describing PIM-DM ===

[[Image:CCNP-92.png]]

 

[[Image:CCNP-93.png]]

 

[[Image:CCNP-94.png]]

 
 

=== 7.3.6 Protocol-Independent Multicast: Describing PIM-SM ===

[[Image:CCNP-95.png]]

 

[[Image:CCNP-96.png]]

 
 

=== 7.4.1 Enabling PIM Sparse Mode and Sparse-Dense Mode ===

[[Image:CCNP-99.png]]

 
 

=== 7.4.2 Inspecting the Multicast Routing Table ===

[[Image:CCNP-100.png]]

 
 

=== 7.4.3 Finding PIM Neighbors ===

[[Image:CCNP-101.png]]

 
 

=== 7.4.4 Checking RP Information ===

[[Image:CCNP-102.png]]

 
 

=== 7.4.5 Checking the Group State ===

[[Image:CCNP-103.png]]

 
 

=== 7.4.6 Configuring a Router to Be a Member of a Group ===

[[Image:CCNP-104.png]]

 

= Module 8: IPv6 =

== Forkortelser ==

'''RSVP''' = Reservation Protocol [RSVP]

'''MLDv1''' = Multicast Listener Discovery version 1 [MLDv1]

'''DAD''' = duplicate address detection (DAD)

'''RIPng''' = Routing Information Protocol next generation

'''RIB''' = Routing Information Base (RIB).

'''ISATAP''' = Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)

'''NAT-PT''' = NAT-Protocol Translation (NAT-PT)

'''The IPv6 header contains these fields:'''

*'''Version:''' 4-bit field, the same as in IPv4. It contains the number 6 instead of the number 4 for IPv4.
*'''Traffic Class:''' 8-bit field similar to the type of service (ToS) field in IPv4. It tags the packet with a traffic class that it uses in Differentiated Services (DiffServ). These functionalities are the same for IPv6 and IPv4.
*'''Flow Label:''' 20-bit field that allows a particular flow of traffic to be labeled. It can be used for multilayer switching techniques and faster packet-switching performance.
*'''Payload Length:''' Similar to the Total Length field in IPv4. It specifies the length of the payload, in bytes, that the packet is encapsulating.
*'''Next Header:''' Specifies which header follows the IPv6 packet header. It can be a transport-layer packet, such as TCP or UDP, or it can be an extension header. This field is similar to the Protocol field in IPv4.
*'''Hop Limit:''' Specifies the maximum number of hops that an IP packet can traverse. Each hop or router decreases this field by one (similar to the Time to Live [TTL] field in IPv4). Because there is no checksum in the IPv6 header, the router can decrease the field without recomputing the checksum. Recomputation costs valuable processing time on IPv4 routers.
*'''Source Address:''' This field has 16 octets or 128 bits. It identifies the source of the packet.
*'''Destination Address:''' This field has 16 octets or 128 bits. It identifies the destination of the packet.
*'''Extension Headers:''' Follows the previous eight fields. The number of extension headers is not fixed, so the total length of the extension header chain is variable.

== Teori ==

[[Image:CCNP-105.png]]

 
 

=== ===

[[Image:CCNP-106.png]]

 
 

=== ===

[[Image:CCNP-107.png]]

 
 

=== ===

[[Image:CCNP-108.png]]

 
 

=== ===

[[Image:CCNP-109.png]]

 
 

=== ===

[[Image:CCNP-110.png]]

 
 

=== ===

[[Image:CCNP-111.png]]

 
 

=== ===

[[Image:CCNP-112.png]]

 
 

=== ===

[[Image:CCNP-113.png]]

 
 

=== ===

[[Image:CCNP-114.png]]

 
 

=== ===

[[Image:CCNP-115.png]]

 
 

=== ===

[[Image:CCNP-116.png]]

 
 

=== ===

[[Image:CCNP-117.png]]

 
 

=== ===

[[Image:CCNP-118.png]]

 
 

=== ===

[[Image:CCNP-119.png]]

 
 

=== ===

[[Image:CCNP-120.png]]

 
 

=== ===

[[Image:CCNP-121.png]]

 
 

=== ===

[[Image:CCNP-122.png]]

 
 

=== ===

[[Image:CCNP-123.png]]

 
 

=== ===

[[Image:CCNP-124.png]]

 
 

=== ===

[[Image:CCNP-125.png]]

 
 

=== ===

[[Image:CCNP-126.png]]

 
 

=== ===

[[Image:CCNP-127.png]]

 
 

=== ===

[[Image:CCNP-128.png]]

 
 

=== ===

[[Image:CCNP-129.png]]

 
 

=== ===

[[Image:CCNP-130.png]]

 
 

=== ===

[[Image:CCNP-131.png]]

 
 

=== ===

[[Image:CCNP-132.png]]

 
 

=== ===

[[Image:CCNP-133.png]]

 
 

=== ===

[[Image:CCNP-134.png]]

 
 

=== ===

[[Image:CCNP-135.png]]

 
 

=== ===

[[Image:CCNP-136.png]]

 
 

=== ===

[[Image:CCNP-137.png]]

 
 

=== ===

[[Image:CCNP-138.png]]

 
 

=== ===

[[Image:CCNP-139.png]]

 
 

=== ===

[[Image:CCNP-140.png]]

Pederrs CCNP 1

2009-02-27T09:52:20Z

Pederrs: /* Forkortelser */

= Module 1: Scalable Network Design =

== Forkortelser: ==

'''ECNM''' = Enterprise Composite Network Model

'''NAC''' = Network Access Control (NAC) and

'''IBNS''' = Identity Based Network Services (IBNS)

= Module 2: EIGRP =

== Forkortelser: ==

'''AD''' = advertised distance (AD)

'''FD''' = feasible distance (FD)

'''AD og FD forklaring:'''
The lowest cost route is calculated by adding the cost between the next-hop router and the destination—referred to as the advertised distance (AD)—to the cost between the local router and the next-hop router. The sum of these costs is called the feasible distance (FD).

'''DUAL''' = Diffusing Update Algorithm (DUAL)

'''PDM''' = Protocol-dependent modules (PDMs) are responsible for network layer protocol-specific requirements. EIGRP supports IP,AppleTalk, and Novell NetWare. Each protocol has its own EIGRP module and operates independently from any of the others that may be running.

'''RTP''' = RTP is responsible for guaranteed ordered delivery and reception of EIGRP packets to all neighbors. RTP supports intermixed transmission of multicast and unicast packets. For efficiency, only certain EIGRP packets are transmitted reliably.

'''SRTT''' = (smoothed round-trip time): Average number of milliseconds it takes for an EIGRP packet to be sent to this neighbor and for the local router to receive an acknowledgment of that packet. This timer determines the retransmit interval, also known as the retransmission timeout (RTO).

'''RTO''' = (retransmission timeout): Amount of time, in milliseconds, that the router waits for an acknowledgment before retransmitting a reliable packet from the retransmission queue to a neighbor. If an EIGRP update, query, or reply is sent, a copy of the packet is queued. If the RTO expires before an acknowledgment is received, another copy of the queued packet is sent.

'''SIA''' = stuck in active (SIA)

'''LSDB''' = link-state database (LSDB)

'''SPF''' = Shortest Path First (SPF)

== Teori ==

Although the metric can be based on five criteria, EIGRP uses only two of these criteria by default:

*Bandwidth: Smallest bandwidth between source and destination.
*Delay: Cumulative interface delay along the path.

Three other criteria can be used, but are not recommended, because they typically result in frequent recalculation of the topology table:

*Reliability: Worst reliability between source and destination, based on keepalives.
*Loading: Worst load on a link between source and destination, based on the packet rate and the configured bandwidth of the interface.
*MTU: Smallest MTU in the path. MTU is included in the EIGRP routing update, but is not actually used in the metric calculation.

= Module 3: OSPF =

== Forkortelser: ==

== Teori ==

=== 3.1.1 Link State Routing Protocols ===

=== [[Image:CCNP-2.png]] ===

 

=== 3.1.3 Link State Data Structures ===

[[Image:CCNP-3.png]]

 

=== 3.1.6 Types of OSPF Routers ===

The four different types of OSPF routers are:

*Internal routers: Routers that have all their interfaces in the same area and have identical LSDBs.
*Backbone routers: Routers that sit on the perimeter of the backbone area and have at least one interface connected to area 0. Backbone routers maintain OSPF routing information using the same procedures and algorithms as internal routers.
*Area border routers: Routers that have interfaces attached to multiple areas, maintain separate LSDBs for each area to which they connect, and route traffic destined to or arriving from other areas. Area border routers (ABRs) are exit points for the area, which means that routing information destined for another area can get there only via the ABR of the local area. ABRs can be configured to summarize the routing information from the LSDBs of their attached areas. ABRs distribute the routing information into the backbone. The backbone routers then forward the information to the other ABRs. In a multiarea network, an area can have one or more ABRs.
*Autonomous System Boundary Routers: Routers that have at least one interface attached to an external internetwork (another autonomous system), such as a non-OSPF network. Autonomous system boundary routers (ASBRs) can import non-OSPF network information to the OSPF network and vice versa; this process is called route redistribution.

[[Image:CCNP-4.png]]

 

=== 3.1.9 Link-State Data Structures ===

When each router receives the LSU, it does the following:

*If the LSA does not already exist, the router adds the entry to its LSDB, sends a link-state acknowledgment (LSAck) back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists and the received LSA has the same sequence number, the router ignores the LSA entry.
*If the entry already exists but the LSA includes newer information (it has a higher sequence number), the router adds the entry to its LSDB, sends an LSAck back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists but the LSA includes older information, it sends an LSU to the sender with its newer information

[[Image:CCNP-8.png]]

 

=== 3.2.1 OSPF Packet Types ===

The OSPF protocol exchanges five packet types:

*Hello
*Database description (DBD)
*Link-state request (LSR)
*Link-state update (LSU)
*Link-state acknowledgement (LSAck)

[[Image:CCNP-5.png]]

 

=== 3.2.2 OSPF Packet Header Format ===

All five OSPF packets are encapsulated directly into an IP payload, as shown in Figure . The OSPF packet does not use TCP or User Datagram Protocol (UDP). OSPF requires a reliable packet transport scheme. Since TCP is not used, it has defined its own acknowledgment routine that uses an acknowledgment packet (OSPF packet type 5).

In the IP header, a protocol identifier of 89 defines all OSPF packets. Each of the OSPF packets begins with the same header format. This header has the following fields:

*Version number: For OSPF version 2 or 3
*Type: Differentiates the five OSPF packet types
*Packet length: Length of packet in bytes
*Router ID: Defines which router is the source of the packet
*Area ID: Defines the area where the packet originated
*Checksum: Used for packet-header error detection to ensure that the OSPF packet was not corrupted during transmission
*Authentication type: An option that specifies either no authentication, clear-text passwords, or encrypted Message Digest 5 (MD5) formats for router authentication
*Authentication: Used in the authentication scheme
*Data (for hello packet): Includes a list of known neighborsData (for DBD packet): Contains a summary of LSDB, which includes all known router *IDs and their last sequence number, among a number of other fields
*Data (for LSR packet): Contains the type of LSU needed and the router ID that has the needed LSU
*Data (for LSU packet): Contains the full LSA entries; multiple LSA entries can fit in one OSPF update packet
*Data (for LSAck packet): Is empty

[[Image:CCNP-9.png]]

 

=== 3.3.4 Configuring a Router ID ===

[[Image:CCNP-6.png]]

 

=== Verifying the OSPF Operation ===

[[Image:CCNP-7.png]]

 

=== 3.6.3 OSPF LSA Types (cont.) ===

'''Type 1'''
Every router generates router link advertisements for each area to which it belongs. A type 1 LSA describes the collective states of the directly connected links (interfaces) of the router. These LSAs are flooded only within the area in which they are originated.

'''Type 2'''
A type 2 LSA is generated for every transit broadcast and NBMA network within an area. A transit network has at least two directly attached OSPF routers. Ethernet is an example of a transit network.

The DR of the network is responsible for advertising the network LSA. A type 2 network LSA lists each of the attached routers that make up the transit network, including the DR itself, as well as the subnet mask used on the link. The type 2 LSA then floods to all routers within the transit network area. Type 2 LSAs never cross an area boundary. The link-state ID for a network LSA is the IP interface address of the DR that advertises it.

'''Type 3'''
The ABR sends type 3 summary LSAs. Type 3 LSAs advertise any networks owned by an area to the rest of the areas in the OSPF autonomous system, as shown in Figure .

The link-state ID is set to the network number; the mask is also advertised.

By default, OSPF does not automatically summarize groups of contiguous subnets or summarize a network to its classful boundary. The network operator uses configuration commands to specify how the summarization occurs. By default, a type 3 LSA is advertised into the backbone area for every subnet defined in the originating area, which can cause significant flooding problems. Consequently, you should always consider using manual route summarization at the ABR.

Summary LSAs are flooded throughout a single area only, but are regenerated by ABRs to flood into other areas.

Note
By default, summary LSAs do not contain summarized routes.

'''Type 4'''
A type 4 summary LSA is generated by an ABR only when an ASBR exists within an area. A type 4 LSA identifies the ASBR and provides a route to it. The link-state ID is set to the ASBR router ID. All traffic destined to an external autonomous system requires routing table knowledge of the ASBR that originated the external routes.

In Figure , the ASBR sends a type 1 router LSA with an external bit (e bit) that is set to identify itself as an ASBR. When the ABR, which is identified with a border bit (b bit) in the router LSA, receives the type 1 LSA, it builds a type 4 LSA and floods it to the backbone (area 0). Subsequent ABRs regenerate a type 4 LSA to flood into their areas.

'''Type 5'''
Type 5 external LSAs describe routes to networks outside the OSPF autonomous system. Type 5 LSAs are originated by the ASBR and are flooded to the entire autonomous system.

The link-state ID is the external network number. Because of the flooding scope, and depending on the number of external networks, the default lack of route summarization can be a major issue with external LSAs. Therefore, you should summarize blocks of external network numbers at the ASBR to reduce flooding problems.

'''Type 6'''
Type 6 LSAs are specialized LSAs that are used in multicast OSPF applications.

'''Type 7'''
Type 7 is an LSA type that is used in not-so-stubby areas (NSSAs). They are originated by ASBRs within NSSAs and are flooded only within the NSSA in which they originated.

'''Type 8'''
Type 8 is a specialized LSA that is used in internetworking OSPF and Border Gateway Protocol (BGP).

'''Types 9, 10, and 11'''
The opaque LSAs, types 9, 10, and 11, are designated for future upgrades to OSPF for application-specific purposes. For example, Cisco Systems uses opaque LSAs for Multiprotocol Label Switching (MPLS) with OSPF. Opaque LSAs are distributed using standard LSDB flooding mechanisms. Each type has a different flooding scope.

'''Standard area:''' Accepts link updates, route summaries, and external routes (the default).

'''Backbone area (transit area):''' The central entity to which all other areas connect to exchange and route information. The backbone area is labeled area 0. The OSPF backbone includes all the properties of a standard OSPF area.

'''Stub area:''' Does not accept information about routes external to the autonomous system, such as routes from non-OSPF sources. This means that no type 5 LSAs are known inside the area, and consequently type 4 LSAs are unnecessary. Type 4 and 5 LSAs are blocked.
ABRs at the edge of the stub area use type 3 LSAs to advertise a single default route (0.0.0.0) into the area. If routers need to route to networks outside the autonomous area, they use the default route.
Stub areas cannot contain ASBRs (except that the ABRs may also be ASBRs).

'''Totally stubby area:''' Does not accept external autonomous system routes or summary routes from other areas internal to the autonomous system. The ABR of the totally stubby area blocks type 4 and 5 LSAs as well as all summary LSAs (type 3), with an exception of a single type 3 LSA to advertise the default route.
The default route advertised by the ABR is used to reach destinations external to the autonomous system and all destinations external to the area. Therefore, if the router needs to send a packet to a network external to the area, it sends the packet using a default route.

Totally stubby areas cannot contain ASBRs (except that the ABRs may also be ASBRs).

'''Not-so-stubby area:''' An NSSA is an addendum to the OSPF RFC. It offers benefits that are similar to those of a stub or totally stubby area, but also allows external routes to be advertised into the OSPF autonomous system. Therefore, NSSAs allow ASBRs, which is against the rule in a stub area.
The ASBR originates type 7 LSAs to advertise the external destinations. The type 7 LSAs are flooded throughout the NSSA but are blocked by the ABR. The ABR converts the type 7 LSA into a type 5 LSA, which is then propagated through the remainder of the autonomous system.

= Module 4: Integrated IS-IS =

== Forkortelser ==

'''MPLS/TE''' = Multiprotocol Label Switching Traffic Engineering (MPLS/TE).

'''IGP''' = interior gateway protocol (IGP)

'''CLNS''' = Connectionless Network Service (CLNS)

'''CLNP''' = Connectionless Network Protocol (CLNP)

'''LSP''' = link-state packet (LSP)

'''PDU''' = protocol data unit (PDU)

'''IS''' = Intermediate System

'''ES''' = end system (ES)

'''ES-IS''' = End System-to-Intermediate System (ES-IS)

'''ESH''' = End System Hello (ESH)

'''ISH''' = Intermediate System Hello (ISH)

'''IIH''' = IS-IS Hello (IIH)

'''DIS''' = designated IS router (DIS)

'''NSAP''' = network service access points (NSAP)

'''NSEL''' = NSAP selector (NSEL)

'''IDP''' = initial domain part (IDP)

'''AFI''' = authority and format identifier (AFI)

'''IDI''' = initial domain identifier (IDI)

'''DSP''' = domain specific part (DSP)

'''HO-DSP''' = high-order DSP (HO-DSP)

'''SNPA''' = subnetwork point of attachment (SNPA)

'''CLV''' = Code, Length, Value (CLV)

'''SNP''' = Sequence number PDU (SNP)

'''PRC''' = partial route calculation (PRC)

'''Example of a net address:'''

For example, you might assign 49.0001.0000.0c12.3456.00, which represents the following:

AFI of 49
Area ID of 0001
System ID of 0000.0c12.3456, the MAC address of a LAN interface
NSEL of 0

== Teori ==

=== 4.1.2 IS-IS and OSPF ===

[[Image:CCNP-14.png]]

 
 

=== 4.1.4 IS-IS Features ===

[[Image:CCNP-15.png]]

 
 

=== 4.1.5 IS-IS Link-State Operation ===

[[Image:CCNP-16.png]]

 
 

=== 4.1.8 The ES-IS Protocol ===

[[Image:CCNP-17.png]]

 
 

=== 4.1.9 OSI Routing Levels ===

[[Image:CCNP-18.png]]

 
 

=== 4.1.10 IS-IS and OSPF Network Design ===

[[Image:CCNP-19.png]]

 
 

=== 4.1.11 Differences Between Integrated IS-IS and OSPF ===

[[Image:CCNP-20.png]]

 
 

=== 4.2.1 NSAP Addresses ===

[[Image:CCNP-141.png]]

 
 

=== 4.2.2 NSAP Address Structure ===

[[Image:CCNP-21.png]]

 
 

=== 4.2.3 NSAP Address Example ===

[[Image:CCNP-22.png]]

 
 

= Module 5: Route Optimization =

== Forkortelser ==

'''PBR''' = Policy-based routing (PBR)

== Teori ==

=== 5.1.4 Using Seed Metrics ===

[[Image:CCNP-25.png]]

 
 

=== 5.1.6 Defining Administrative Distance ===

[[Image:CCNP-26.png]]

 
 

=== 5.3.2 Passive Interfaces ===

[[Image:CCNP-27.png]]

 
 

=== 5.4.1 Defining Route Maps ===

[[Image:CCNP-28.png]]

 
 

=== 5.4.3 Route Map Operation ===

[[Image:CCNP-29.png]]

 

[[Image:CCNP-30.png]]

 
 

=== 5.4.4 Using Route Map Commands ===

[[Image:CCNP-31.png]]

 
 

=== 5.5.3 Configuring DHCP ===

[[Image:CCNP-32.png]]

 
 

= Module 6: BGP =

== Forkortelser ==
Protocols that run inside an enterprise are called interior gateway protocols (IGPs). Examples of IGPs include RIP versions 1 and 2, EIGRP, and OSPF.

Protocols that run outside an enterprise, or between autonomous systems, are called exterior gateway protocols (EGPs). Typically, EGPs are used to exchange routing information between Internet Service Providers (ISPs).

'''IGP''': Exchanges routing information within an autonomous system. RIP, IGRP, OSPF, IS-IS, and EIGRP are IGPs.

'''EGP''': Exchanges routing information between different autonomous systems. BGP is an EGP.

'''IDRP''' = BGP is an interdomain routing protocol (IDRP), also known as an EGP.

'''EBGP''' = When BGP is running between routers in different autonomous systems, it is called External BGP (EBGP).

'''IBGP''' = When BGP is running between routers in the same autonomous system, it is called Internal BGP (IBGP).

'''RIR''' = Regional Internet Registry (RIR)

'''FSM''' = finite-state machine (FSM)

== Teori ==

=== 6.1.2 BGP Multihoming Options ===

[[Image:CCNP-33.png]]

 
 

=== 6.1.6 BGP Routing Between Autonomous Systems ===

[[Image:CCNP-34.png]]

 
 

=== 6.1.7 Path-Vector Functionality ===

[[Image:CCNP-35.png]]

 
 

=== 6.1.9 Features of BGP ===

[[Image:CCNP-36.png]]

 
 

=== 6.1.10 BGP Databases ===

[[Image:CCNP-37.png]]

 
 

=== 6.1.11 BGP Message Types ===

[[Image:CCNP-38.png]]

 
 

=== 6.2.2 Establishing a Connection Between External BGP Neighbors ===

[[Image:CCNP-39.png]]

 
 

=== 6.2.3 Establishing a Connection Between Internal BGP Neighbors ===

[[Image:CCNP-40.png]]

 
 

=== 6.2.5 IBGP in a Nontransit Autonomous System ===

[[Image:CCNP-41.png]]

 
 

=== 6.2.6 Routing Issues in a Transit Autonomous System ===

[[Image:CCNP-42.png]]

 
 

=== 6.3.1 Basic BGP Configuration ===

[[Image:CCNP-43.png]]

 
 

=== 6.3.2 Activate a BGP Session ===

[[Image:CCNP-44.png]]

 
 

=== 6.3.3 Shutting Down a BGP Neighbor ===

[[Image:CCNP-45.png]]

 
 

=== 6.3.4 BGP Configuration Considerations ===

[[Image:CCNP-46.png]]

 
 

=== 6.3.5 IBGP Peering Issue ===

[[Image:CCNP-47.png]]

 
 

=== 6.3.6 BGP neighbor update-source Command ===

[[Image:CCNP-48.png]]

 

[[Image:CCNP-49.png]]

 
 

=== 6.3.7 EBGP Peering Issue (EBGP Multihop) ===

[[Image:CCNP-50.png]]

 
 

=== 6.3.8 Next Hop Behavior ===

[[Image:CCNP-51.png]]

 

[[Image:CCNP-52.png]]

 
 

=== 6.3.9 BGP neighbor next-hop-self Command ===

[[Image:CCNP-53.png]]

 
 

=== 6.3.10 Injection Routing Information into BGP ===

[[Image:CCNP-54.png]]

 
 

=== 6.3.12 BGP Synchronization ===

[[Image:CCNP-55.png]]

 
 

=== 6.3.13 BGP Synchronization Example ===

[[Image:CCNP-56.png]]

 

[[Image:CCNP-57.png]]

 
 

=== 6.4.1 BGP Neighbor States ===

[[Image:CCNP-58.png]]

 
 

=== 6.4.5 Configuring a Peer Group Example ===

[[Image:CCNP-59.png]]

 
 

=== 6.4.7 Configuring BGP Authentication ===

[[Image:CCNP-60.png]]

 
 

=== 6.4.11 Soft Reset of BGP Sessions ===

[[Image:CCNP-61.png]]

 

[[Image:CCNP-62.png]]

 

[[Image:CCNP-63.png]]

 
 

=== 6.5.3 AS Path Attribute ===

[[Image:CCNP-64.png]]

 
 

=== 6.5.4 Next-Hop Attribute ===

[[Image:CCNP-65.png]]

 
 

=== 6.5.5 Origin Attribute ===

[[Image:CCNP-66.png]]

 
 

=== 6.5.6 Local Preference Attribute ===

[[Image:CCNP-67.png]]

 
 

=== 6.5.7 MED Attribute ===

[[Image:CCNP-68.png]]

 
 

=== 6.5.8 Weight Attribute ===

[[Image:CCNP-69.png]]

 
 

=== 6.5.10 Selecting a BGP Path ===

[[Image:CCNP-70.png]]

 
 

=== 6.6.3 Changing the BGP Local Preference for All Routes ===

[[Image:CCNP-71.png]]

 
 

=== 6.6.7 Setting the MED with Route Maps ===

[[Image:CCNP-73.png]]

 

= Module 7: IP Multicasting =

== Forkortelser ==

VoD = video on demand [VoD]

UDP = User Datagram Protocol (UDP)

Locally scoped (reserved link local) addresses
Reserved by the Internet Assigned Numbers Authority (IANA) for network protocol use.
Address range is from 224.0.0.0 through 224.0.0.255.
Multicasts in this range are never forwarded off the local network, regardless of Time to Live (TTL). Usually, the TTL is set to 1.

Globally scoped addresses
Allocated dynamically throughout the Internet.
Address range is from 224.0.1.0 through 238.255.255.255.
The 224.2.X.X range is used in Multicast Backbone (Mbone) applications. Established by the Internet Engineering Task Force (IETF) to multicast audio and video meetings, Mbone is a collection of Internet routers that support IP multicasting on which various public and private audio and video programs are sent.

Limited (administratively) scoped addresses
Reserved for use inside private domains. Similar to the private IP address space that is used within the boundaries of a single organization, limited or administratively scoped addresses are constrained to a local group or organization.
Address range is from 239.0.0.0 through 239.255.255.255.
Organizations can use limited scope addresses to have local multicast applications that will not be forwarded over the Internet.

SDP = Session Description Protocol (SDP)

SAP = Session Announcement Protocol (SAP)

SDR = Both the sd application and SDP are sometimes called SDR or sdr. In Cisco documentation, SDP/SAP is referred to as sdr.

SIP = Session Initiation Protocol (SIP)

RTSP = Real Time Streaming Protocol (RTSP)

IGMP = Internet Group Management Protocol (IGMP)

CGMP = Cisco Group Management Protocol (CGMP)

ASIC = application-specific integrated circuit (ASIC)

CAM = content-addressable memory (CAM)

SPT = shortest path tree (SPT)

RP = rendezvous point (RP)

PIM = Protocol-Independent Multicast (PIM)

RPF = Reverse Path Forwarding (RPF)

SSM = Source Specific Multicast (SSM)

MSDP = Multicast Source Discovery Protocol [MSDP]

OIL = outgoing interface list (OIL)

DVMRP = Distance Vector Multicast Routing Protocol (DVMRP)

== Teori ==

=== 7.1.3 Multicast Advantages and Disadvantages ===

[[Image:CCNP-75.png]]

 
 

=== 7.1.4 Multicast Applications ===

[[Image:CCNP-76.png]]

 
 

=== 7.1.5 IP Multicast Addresses ===

[[Image:CCNP-77.png]]

 

[[Image:CCNP-78.png]]

 

[[Image:CCNP-79.png]]

 
 

=== 7.1.6 Layer 2 Multicast Addressing ===

[[Image:CCNP-80.png]]

 
 

=== 7.2.2 IGMPv2 Join Group and Leave Group Messages ===

[[Image:CCNP-81.png]]

 
 

=== 7.2.3 Introducing IGMPv3 ===

[[Image:CCNP-82.png]]

 
 

=== 7.2.5 Multicast in the Layer 2 Switching Environment ===

[[Image:CCNP-83.png]]

 
 

=== 7.2.6 Multicast in Layer 2 Solutions ===

[[Image:CCNP-84.png]]

 
 

=== 7.2.7 Cisco Group Management Protocol (CGMP) ===

[[Image:CCNP-85.png]]

 
 

=== 7.2.8 IGMP Snooping ===

[[Image:CCNP-86.png]]

 
 

=== 7.3.1 Protocols Used in Multicast ===

[[Image:CCNP-87.png]]

 
 

=== 7.3.2 Multicast Distribution Trees ===

[[Image:CCNP-88.png]]

 

[[Image:CCNP-89.png]]

 
 

=== 7.3.3 Multicast Distribution Trees Identification ===

[[Image:CCNP-90.png]]

 
 

=== 7.3.4 IP Multicast Routing ===

[[Image:CCNP-91.png]]

 
 

=== 7.3.5 Protocol-Independent Multicast: Describing PIM-DM ===

[[Image:CCNP-92.png]]

 

[[Image:CCNP-93.png]]

 

[[Image:CCNP-94.png]]

 
 

=== 7.3.6 Protocol-Independent Multicast: Describing PIM-SM ===

[[Image:CCNP-95.png]]

 

[[Image:CCNP-96.png]]

 
 

=== 7.4.1 Enabling PIM Sparse Mode and Sparse-Dense Mode ===

[[Image:CCNP-99.png]]

 
 

=== 7.4.2 Inspecting the Multicast Routing Table ===

[[Image:CCNP-100.png]]

 
 

=== 7.4.3 Finding PIM Neighbors ===

[[Image:CCNP-101.png]]

 
 

=== 7.4.4 Checking RP Information ===

[[Image:CCNP-102.png]]

 
 

=== 7.4.5 Checking the Group State ===

[[Image:CCNP-103.png]]

 
 

=== 7.4.6 Configuring a Router to Be a Member of a Group ===

[[Image:CCNP-104.png]]

 

= Module 8: IPv6 =

== Forkortelser ==

'''RSVP''' = Reservation Protocol [RSVP]

'''MLDv1''' = Multicast Listener Discovery version 1 [MLDv1]

'''DAD''' = duplicate address detection (DAD)

'''RIPng''' = Routing Information Protocol next generation

'''RIB''' = Routing Information Base (RIB).

'''ISATAP''' = Intra-Site Automatic Tunnel Addressing Protocol (ISATAP)

'''NAT-PT''' = NAT-Protocol Translation (NAT-PT)

'''The IPv6 header contains these fields:'''

*'''Version:''' 4-bit field, the same as in IPv4. It contains the number 6 instead of the number 4 for IPv4.
*'''Traffic Class:''' 8-bit field similar to the type of service (ToS) field in IPv4. It tags the packet with a traffic class that it uses in Differentiated Services (DiffServ). These functionalities are the same for IPv6 and IPv4.
*'''Flow Label:''' 20-bit field that allows a particular flow of traffic to be labeled. It can be used for multilayer switching techniques and faster packet-switching performance.
*'''Payload Length:''' Similar to the Total Length field in IPv4. It specifies the length of the payload, in bytes, that the packet is encapsulating.
*'''Next Header:''' Specifies which header follows the IPv6 packet header. It can be a transport-layer packet, such as TCP or UDP, or it can be an extension header. This field is similar to the Protocol field in IPv4.
*'''Hop Limit:''' Specifies the maximum number of hops that an IP packet can traverse. Each hop or router decreases this field by one (similar to the Time to Live [TTL] field in IPv4). Because there is no checksum in the IPv6 header, the router can decrease the field without recomputing the checksum. Recomputation costs valuable processing time on IPv4 routers.
*'''Source Address:''' This field has 16 octets or 128 bits. It identifies the source of the packet.
*'''Destination Address:''' This field has 16 octets or 128 bits. It identifies the destination of the packet.
*'''Extension Headers:''' Follows the previous eight fields. The number of extension headers is not fixed, so the total length of the extension header chain is variable.

== Teori ==

[[Image:CCNP-105.png]]

 

[[Image:CCNP-106.png]]

 

[[Image:CCNP-107.png]]

 

[[Image:CCNP-108.png]]

 

[[Image:CCNP-109.png]]

 

[[Image:CCNP-110.png]]

 

[[Image:CCNP-111.png]]

 

[[Image:CCNP-112.png]]

 

[[Image:CCNP-113.png]]

 

[[Image:CCNP-114.png]]

 

[[Image:CCNP-115.png]]

 

[[Image:CCNP-116.png]]

 

[[Image:CCNP-117.png]]

 

[[Image:CCNP-118.png]]

 

[[Image:CCNP-119.png]]

 

[[Image:CCNP-120.png]]

 

[[Image:CCNP-121.png]]

 

[[Image:CCNP-122.png]]

 

[[Image:CCNP-123.png]]

 

[[Image:CCNP-124.png]]

 

[[Image:CCNP-125.png]]

 

[[Image:CCNP-126.png]]

 

[[Image:CCNP-127.png]]

 

[[Image:CCNP-128.png]]

 

[[Image:CCNP-129.png]]

 

[[Image:CCNP-130.png]]

 

[[Image:CCNP-131.png]]

 

[[Image:CCNP-132.png]]

 

[[Image:CCNP-133.png]]

 

[[Image:CCNP-134.png]]

 

[[Image:CCNP-135.png]]

 

[[Image:CCNP-136.png]]

 

[[Image:CCNP-137.png]]

 

[[Image:CCNP-138.png]]

 

[[Image:CCNP-139.png]]

 

[[Image:CCNP-140.png]]

Pederrs CCNP 1

2009-02-25T21:06:25Z

Pederrs: /* Teori */

= Module 1: Scalable Network Design =

== Forkortelser: ==

'''ECNM''' = Enterprise Composite Network Model

'''NAC''' = Network Access Control (NAC) and

'''IBNS''' = Identity Based Network Services (IBNS)

= Module 2: EIGRP =

== Forkortelser: ==

'''AD''' = advertised distance (AD)

'''FD''' = feasible distance (FD)

'''AD og FD forklaring:'''
The lowest cost route is calculated by adding the cost between the next-hop router and the destination—referred to as the advertised distance (AD)—to the cost between the local router and the next-hop router. The sum of these costs is called the feasible distance (FD).

'''DUAL''' = Diffusing Update Algorithm (DUAL)

'''PDM''' = Protocol-dependent modules (PDMs) are responsible for network layer protocol-specific requirements. EIGRP supports IP,AppleTalk, and Novell NetWare. Each protocol has its own EIGRP module and operates independently from any of the others that may be running.

'''RTP''' = RTP is responsible for guaranteed ordered delivery and reception of EIGRP packets to all neighbors. RTP supports intermixed transmission of multicast and unicast packets. For efficiency, only certain EIGRP packets are transmitted reliably.

'''SRTT''' = (smoothed round-trip time): Average number of milliseconds it takes for an EIGRP packet to be sent to this neighbor and for the local router to receive an acknowledgment of that packet. This timer determines the retransmit interval, also known as the retransmission timeout (RTO).

'''RTO''' = (retransmission timeout): Amount of time, in milliseconds, that the router waits for an acknowledgment before retransmitting a reliable packet from the retransmission queue to a neighbor. If an EIGRP update, query, or reply is sent, a copy of the packet is queued. If the RTO expires before an acknowledgment is received, another copy of the queued packet is sent.

'''SIA''' = stuck in active (SIA)

'''LSDB''' = link-state database (LSDB)

'''SPF''' = Shortest Path First (SPF)

== Teori ==

Although the metric can be based on five criteria, EIGRP uses only two of these criteria by default:

*Bandwidth: Smallest bandwidth between source and destination.
*Delay: Cumulative interface delay along the path.

Three other criteria can be used, but are not recommended, because they typically result in frequent recalculation of the topology table:

*Reliability: Worst reliability between source and destination, based on keepalives.
*Loading: Worst load on a link between source and destination, based on the packet rate and the configured bandwidth of the interface.
*MTU: Smallest MTU in the path. MTU is included in the EIGRP routing update, but is not actually used in the metric calculation.

= Module 3: OSPF =

== Forkortelser: ==

== Teori ==

=== 3.1.1 Link State Routing Protocols ===

=== [[Image:CCNP-2.png]] ===

 

=== 3.1.3 Link State Data Structures ===

[[Image:CCNP-3.png]]

 

=== 3.1.6 Types of OSPF Routers ===

The four different types of OSPF routers are:

*Internal routers: Routers that have all their interfaces in the same area and have identical LSDBs.
*Backbone routers: Routers that sit on the perimeter of the backbone area and have at least one interface connected to area 0. Backbone routers maintain OSPF routing information using the same procedures and algorithms as internal routers.
*Area border routers: Routers that have interfaces attached to multiple areas, maintain separate LSDBs for each area to which they connect, and route traffic destined to or arriving from other areas. Area border routers (ABRs) are exit points for the area, which means that routing information destined for another area can get there only via the ABR of the local area. ABRs can be configured to summarize the routing information from the LSDBs of their attached areas. ABRs distribute the routing information into the backbone. The backbone routers then forward the information to the other ABRs. In a multiarea network, an area can have one or more ABRs.
*Autonomous System Boundary Routers: Routers that have at least one interface attached to an external internetwork (another autonomous system), such as a non-OSPF network. Autonomous system boundary routers (ASBRs) can import non-OSPF network information to the OSPF network and vice versa; this process is called route redistribution.

[[Image:CCNP-4.png]]

 

=== 3.1.9 Link-State Data Structures ===

When each router receives the LSU, it does the following:

*If the LSA does not already exist, the router adds the entry to its LSDB, sends a link-state acknowledgment (LSAck) back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists and the received LSA has the same sequence number, the router ignores the LSA entry.
*If the entry already exists but the LSA includes newer information (it has a higher sequence number), the router adds the entry to its LSDB, sends an LSAck back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists but the LSA includes older information, it sends an LSU to the sender with its newer information

[[Image:CCNP-8.png]]

 

=== 3.2.1 OSPF Packet Types ===

The OSPF protocol exchanges five packet types:

*Hello
*Database description (DBD)
*Link-state request (LSR)
*Link-state update (LSU)
*Link-state acknowledgement (LSAck)

[[Image:CCNP-5.png]]

 

=== 3.2.2 OSPF Packet Header Format ===

All five OSPF packets are encapsulated directly into an IP payload, as shown in Figure . The OSPF packet does not use TCP or User Datagram Protocol (UDP). OSPF requires a reliable packet transport scheme. Since TCP is not used, it has defined its own acknowledgment routine that uses an acknowledgment packet (OSPF packet type 5).

In the IP header, a protocol identifier of 89 defines all OSPF packets. Each of the OSPF packets begins with the same header format. This header has the following fields:

*Version number: For OSPF version 2 or 3
*Type: Differentiates the five OSPF packet types
*Packet length: Length of packet in bytes
*Router ID: Defines which router is the source of the packet
*Area ID: Defines the area where the packet originated
*Checksum: Used for packet-header error detection to ensure that the OSPF packet was not corrupted during transmission
*Authentication type: An option that specifies either no authentication, clear-text passwords, or encrypted Message Digest 5 (MD5) formats for router authentication
*Authentication: Used in the authentication scheme
*Data (for hello packet): Includes a list of known neighborsData (for DBD packet): Contains a summary of LSDB, which includes all known router *IDs and their last sequence number, among a number of other fields
*Data (for LSR packet): Contains the type of LSU needed and the router ID that has the needed LSU
*Data (for LSU packet): Contains the full LSA entries; multiple LSA entries can fit in one OSPF update packet
*Data (for LSAck packet): Is empty

[[Image:CCNP-9.png]]

 

=== 3.3.4 Configuring a Router ID ===

[[Image:CCNP-6.png]]

 

=== Verifying the OSPF Operation ===

[[Image:CCNP-7.png]]

 

=== 3.6.3 OSPF LSA Types (cont.) ===

'''Type 1'''
Every router generates router link advertisements for each area to which it belongs. A type 1 LSA describes the collective states of the directly connected links (interfaces) of the router. These LSAs are flooded only within the area in which they are originated.

'''Type 2'''
A type 2 LSA is generated for every transit broadcast and NBMA network within an area. A transit network has at least two directly attached OSPF routers. Ethernet is an example of a transit network.

The DR of the network is responsible for advertising the network LSA. A type 2 network LSA lists each of the attached routers that make up the transit network, including the DR itself, as well as the subnet mask used on the link. The type 2 LSA then floods to all routers within the transit network area. Type 2 LSAs never cross an area boundary. The link-state ID for a network LSA is the IP interface address of the DR that advertises it.

'''Type 3'''
The ABR sends type 3 summary LSAs. Type 3 LSAs advertise any networks owned by an area to the rest of the areas in the OSPF autonomous system, as shown in Figure .

The link-state ID is set to the network number; the mask is also advertised.

By default, OSPF does not automatically summarize groups of contiguous subnets or summarize a network to its classful boundary. The network operator uses configuration commands to specify how the summarization occurs. By default, a type 3 LSA is advertised into the backbone area for every subnet defined in the originating area, which can cause significant flooding problems. Consequently, you should always consider using manual route summarization at the ABR.

Summary LSAs are flooded throughout a single area only, but are regenerated by ABRs to flood into other areas.

Note
By default, summary LSAs do not contain summarized routes.

'''Type 4'''
A type 4 summary LSA is generated by an ABR only when an ASBR exists within an area. A type 4 LSA identifies the ASBR and provides a route to it. The link-state ID is set to the ASBR router ID. All traffic destined to an external autonomous system requires routing table knowledge of the ASBR that originated the external routes.

In Figure , the ASBR sends a type 1 router LSA with an external bit (e bit) that is set to identify itself as an ASBR. When the ABR, which is identified with a border bit (b bit) in the router LSA, receives the type 1 LSA, it builds a type 4 LSA and floods it to the backbone (area 0). Subsequent ABRs regenerate a type 4 LSA to flood into their areas.

'''Type 5'''
Type 5 external LSAs describe routes to networks outside the OSPF autonomous system. Type 5 LSAs are originated by the ASBR and are flooded to the entire autonomous system.

The link-state ID is the external network number. Because of the flooding scope, and depending on the number of external networks, the default lack of route summarization can be a major issue with external LSAs. Therefore, you should summarize blocks of external network numbers at the ASBR to reduce flooding problems.

'''Type 6'''
Type 6 LSAs are specialized LSAs that are used in multicast OSPF applications.

'''Type 7'''
Type 7 is an LSA type that is used in not-so-stubby areas (NSSAs). They are originated by ASBRs within NSSAs and are flooded only within the NSSA in which they originated.

'''Type 8'''
Type 8 is a specialized LSA that is used in internetworking OSPF and Border Gateway Protocol (BGP).

'''Types 9, 10, and 11'''
The opaque LSAs, types 9, 10, and 11, are designated for future upgrades to OSPF for application-specific purposes. For example, Cisco Systems uses opaque LSAs for Multiprotocol Label Switching (MPLS) with OSPF. Opaque LSAs are distributed using standard LSDB flooding mechanisms. Each type has a different flooding scope.

'''Standard area:''' Accepts link updates, route summaries, and external routes (the default).

'''Backbone area (transit area):''' The central entity to which all other areas connect to exchange and route information. The backbone area is labeled area 0. The OSPF backbone includes all the properties of a standard OSPF area.

'''Stub area:''' Does not accept information about routes external to the autonomous system, such as routes from non-OSPF sources. This means that no type 5 LSAs are known inside the area, and consequently type 4 LSAs are unnecessary. Type 4 and 5 LSAs are blocked.
ABRs at the edge of the stub area use type 3 LSAs to advertise a single default route (0.0.0.0) into the area. If routers need to route to networks outside the autonomous area, they use the default route.
Stub areas cannot contain ASBRs (except that the ABRs may also be ASBRs).

'''Totally stubby area:''' Does not accept external autonomous system routes or summary routes from other areas internal to the autonomous system. The ABR of the totally stubby area blocks type 4 and 5 LSAs as well as all summary LSAs (type 3), with an exception of a single type 3 LSA to advertise the default route.
The default route advertised by the ABR is used to reach destinations external to the autonomous system and all destinations external to the area. Therefore, if the router needs to send a packet to a network external to the area, it sends the packet using a default route.

Totally stubby areas cannot contain ASBRs (except that the ABRs may also be ASBRs).

'''Not-so-stubby area:''' An NSSA is an addendum to the OSPF RFC. It offers benefits that are similar to those of a stub or totally stubby area, but also allows external routes to be advertised into the OSPF autonomous system. Therefore, NSSAs allow ASBRs, which is against the rule in a stub area.
The ASBR originates type 7 LSAs to advertise the external destinations. The type 7 LSAs are flooded throughout the NSSA but are blocked by the ABR. The ABR converts the type 7 LSA into a type 5 LSA, which is then propagated through the remainder of the autonomous system.

= Module 4: Integrated IS-IS =

== Forkortelser ==

'''MPLS/TE''' = Multiprotocol Label Switching Traffic Engineering (MPLS/TE).

'''IGP''' = interior gateway protocol (IGP)

'''CLNS''' = Connectionless Network Service (CLNS)

'''CLNP''' = Connectionless Network Protocol (CLNP)

'''LSP''' = link-state packet (LSP)

'''PDU''' = protocol data unit (PDU)

'''IS''' = Intermediate System

'''ES''' = end system (ES)

'''ES-IS''' = End System-to-Intermediate System (ES-IS)

'''ESH''' = End System Hello (ESH)

'''ISH''' = Intermediate System Hello (ISH)

'''IIH''' = IS-IS Hello (IIH)

'''DIS''' = designated IS router (DIS)

'''NSAP''' = network service access points (NSAP)

'''NSEL''' = NSAP selector (NSEL)

'''IDP''' = initial domain part (IDP)

'''AFI''' = authority and format identifier (AFI)

'''IDI''' = initial domain identifier (IDI)

'''DSP''' = domain specific part (DSP)

'''HO-DSP''' = high-order DSP (HO-DSP)

'''SNPA''' = subnetwork point of attachment (SNPA)

'''CLV''' = Code, Length, Value (CLV)

'''SNP''' = Sequence number PDU (SNP)

'''PRC''' = partial route calculation (PRC)

'''Example of a net address:'''

For example, you might assign 49.0001.0000.0c12.3456.00, which represents the following:

AFI of 49
Area ID of 0001
System ID of 0000.0c12.3456, the MAC address of a LAN interface
NSEL of 0

== Teori ==

=== 4.1.2 IS-IS and OSPF ===

[[Image:CCNP-14.png]]

 
 

=== 4.1.4 IS-IS Features ===

[[Image:CCNP-15.png]]

 
 

=== 4.1.5 IS-IS Link-State Operation ===

[[Image:CCNP-16.png]]

 
 

=== 4.1.8 The ES-IS Protocol ===

[[Image:CCNP-17.png]]

 
 

=== 4.1.9 OSI Routing Levels ===

[[Image:CCNP-18.png]]

 
 

=== 4.1.10 IS-IS and OSPF Network Design ===

[[Image:CCNP-19.png]]

 
 

=== 4.1.11 Differences Between Integrated IS-IS and OSPF ===

[[Image:CCNP-20.png]]

 
 

=== 4.2.1 NSAP Addresses ===

[[Image:CCNP-141.png]]

 
 

=== 4.2.2 NSAP Address Structure ===

[[Image:CCNP-21.png]]

 
 

=== 4.2.3 NSAP Address Example ===

[[Image:CCNP-22.png]]

 
 

= Module 5: Route Optimization =

== Forkortelser ==

'''PBR''' = Policy-based routing (PBR)

== Teori ==

=== 5.1.4 Using Seed Metrics ===

[[Image:CCNP-25.png]]

 
 

=== 5.1.6 Defining Administrative Distance ===

[[Image:CCNP-26.png]]

 
 

=== 5.3.2 Passive Interfaces ===

[[Image:CCNP-27.png]]

 
 

=== 5.4.1 Defining Route Maps ===

[[Image:CCNP-28.png]]

 
 

=== 5.4.3 Route Map Operation ===

[[Image:CCNP-29.png]]

 

[[Image:CCNP-30.png]]

 
 

=== 5.4.4 Using Route Map Commands ===

[[Image:CCNP-31.png]]

 
 

=== 5.5.3 Configuring DHCP ===

[[Image:CCNP-32.png]]

 
 

= Module 6: BGP =

== Forkortelser ==
Protocols that run inside an enterprise are called interior gateway protocols (IGPs). Examples of IGPs include RIP versions 1 and 2, EIGRP, and OSPF.

Protocols that run outside an enterprise, or between autonomous systems, are called exterior gateway protocols (EGPs). Typically, EGPs are used to exchange routing information between Internet Service Providers (ISPs).

'''IGP''': Exchanges routing information within an autonomous system. RIP, IGRP, OSPF, IS-IS, and EIGRP are IGPs.

'''EGP''': Exchanges routing information between different autonomous systems. BGP is an EGP.

'''IDRP''' = BGP is an interdomain routing protocol (IDRP), also known as an EGP.

'''EBGP''' = When BGP is running between routers in different autonomous systems, it is called External BGP (EBGP).

'''IBGP''' = When BGP is running between routers in the same autonomous system, it is called Internal BGP (IBGP).

'''RIR''' = Regional Internet Registry (RIR)

'''FSM''' = finite-state machine (FSM)

== Teori ==

=== 6.1.2 BGP Multihoming Options ===

[[Image:CCNP-33.png]]

 
 

=== 6.1.6 BGP Routing Between Autonomous Systems ===

[[Image:CCNP-34.png]]

 
 

=== 6.1.7 Path-Vector Functionality ===

[[Image:CCNP-35.png]]

 
 

=== 6.1.9 Features of BGP ===

[[Image:CCNP-36.png]]

 
 

=== 6.1.10 BGP Databases ===

[[Image:CCNP-37.png]]

 
 

=== 6.1.11 BGP Message Types ===

[[Image:CCNP-38.png]]

 
 

=== 6.2.2 Establishing a Connection Between External BGP Neighbors ===

[[Image:CCNP-39.png]]

 
 

=== 6.2.3 Establishing a Connection Between Internal BGP Neighbors ===

[[Image:CCNP-40.png]]

 
 

=== 6.2.5 IBGP in a Nontransit Autonomous System ===

[[Image:CCNP-41.png]]

 
 

=== 6.2.6 Routing Issues in a Transit Autonomous System ===

[[Image:CCNP-42.png]]

 
 

=== 6.3.1 Basic BGP Configuration ===

[[Image:CCNP-43.png]]

 
 

=== 6.3.2 Activate a BGP Session ===

[[Image:CCNP-44.png]]

 
 

=== 6.3.3 Shutting Down a BGP Neighbor ===

[[Image:CCNP-45.png]]

 
 

=== 6.3.4 BGP Configuration Considerations ===

[[Image:CCNP-46.png]]

 
 

=== 6.3.5 IBGP Peering Issue ===

[[Image:CCNP-47.png]]

 
 

=== 6.3.6 BGP neighbor update-source Command ===

[[Image:CCNP-48.png]]

 

[[Image:CCNP-49.png]]

 
 

=== 6.3.7 EBGP Peering Issue (EBGP Multihop) ===

[[Image:CCNP-50.png]]

 
 

=== 6.3.8 Next Hop Behavior ===

[[Image:CCNP-51.png]]

 

[[Image:CCNP-52.png]]

 
 

=== 6.3.9 BGP neighbor next-hop-self Command ===

[[Image:CCNP-53.png]]

 
 

=== 6.3.10 Injection Routing Information into BGP ===

[[Image:CCNP-54.png]]

 
 

=== 6.3.12 BGP Synchronization ===

[[Image:CCNP-55.png]]

 
 

=== 6.3.13 BGP Synchronization Example ===

[[Image:CCNP-56.png]]

 

[[Image:CCNP-57.png]]

 
 

=== 6.4.1 BGP Neighbor States ===

[[Image:CCNP-58.png]]

 
 

=== 6.4.5 Configuring a Peer Group Example ===

[[Image:CCNP-59.png]]

 
 

=== 6.4.7 Configuring BGP Authentication ===

[[Image:CCNP-60.png]]

 
 

=== 6.4.11 Soft Reset of BGP Sessions ===

[[Image:CCNP-61.png]]

 

[[Image:CCNP-62.png]]

 

[[Image:CCNP-63.png]]

 
 

=== 6.5.3 AS Path Attribute ===

[[Image:CCNP-64.png]]

 
 

=== 6.5.4 Next-Hop Attribute ===

[[Image:CCNP-65.png]]

 
 

=== 6.5.5 Origin Attribute ===

[[Image:CCNP-66.png]]

 
 

=== 6.5.6 Local Preference Attribute ===

[[Image:CCNP-67.png]]

 
 

=== 6.5.7 MED Attribute ===

[[Image:CCNP-68.png]]

 
 

=== 6.5.8 Weight Attribute ===

[[Image:CCNP-69.png]]

 
 

=== 6.5.10 Selecting a BGP Path ===

[[Image:CCNP-70.png]]

 
 

=== 6.6.3 Changing the BGP Local Preference for All Routes ===

[[Image:CCNP-71.png]]

 
 

=== 6.6.7 Setting the MED with Route Maps ===

[[Image:CCNP-73.png]]

 

= Module 7: IP Multicasting =

== Forkortelser ==

VoD = video on demand [VoD]

UDP = User Datagram Protocol (UDP)

Locally scoped (reserved link local) addresses
Reserved by the Internet Assigned Numbers Authority (IANA) for network protocol use.
Address range is from 224.0.0.0 through 224.0.0.255.
Multicasts in this range are never forwarded off the local network, regardless of Time to Live (TTL). Usually, the TTL is set to 1.

Globally scoped addresses
Allocated dynamically throughout the Internet.
Address range is from 224.0.1.0 through 238.255.255.255.
The 224.2.X.X range is used in Multicast Backbone (Mbone) applications. Established by the Internet Engineering Task Force (IETF) to multicast audio and video meetings, Mbone is a collection of Internet routers that support IP multicasting on which various public and private audio and video programs are sent.

Limited (administratively) scoped addresses
Reserved for use inside private domains. Similar to the private IP address space that is used within the boundaries of a single organization, limited or administratively scoped addresses are constrained to a local group or organization.
Address range is from 239.0.0.0 through 239.255.255.255.
Organizations can use limited scope addresses to have local multicast applications that will not be forwarded over the Internet.

SDP = Session Description Protocol (SDP)

SAP = Session Announcement Protocol (SAP)

SDR = Both the sd application and SDP are sometimes called SDR or sdr. In Cisco documentation, SDP/SAP is referred to as sdr.

SIP = Session Initiation Protocol (SIP)

RTSP = Real Time Streaming Protocol (RTSP)

IGMP = Internet Group Management Protocol (IGMP)

CGMP = Cisco Group Management Protocol (CGMP)

ASIC = application-specific integrated circuit (ASIC)

CAM = content-addressable memory (CAM)

SPT = shortest path tree (SPT)

RP = rendezvous point (RP)

PIM = Protocol-Independent Multicast (PIM)

RPF = Reverse Path Forwarding (RPF)

SSM = Source Specific Multicast (SSM)

MSDP = Multicast Source Discovery Protocol [MSDP]

OIL = outgoing interface list (OIL)

DVMRP = Distance Vector Multicast Routing Protocol (DVMRP)

== Teori ==

=== 7.1.3 Multicast Advantages and Disadvantages ===

[[Image:CCNP-75.png]]

 
 

=== 7.1.4 Multicast Applications ===

[[Image:CCNP-76.png]]

 
 

=== 7.1.5 IP Multicast Addresses ===

[[Image:CCNP-77.png]]

 

[[Image:CCNP-78.png]]

 

[[Image:CCNP-79.png]]

 
 

=== 7.1.6 Layer 2 Multicast Addressing ===

[[Image:CCNP-80.png]]

 
 

=== 7.2.2 IGMPv2 Join Group and Leave Group Messages ===

[[Image:CCNP-81.png]]

 
 

=== 7.2.3 Introducing IGMPv3 ===

[[Image:CCNP-82.png]]

 
 

=== 7.2.5 Multicast in the Layer 2 Switching Environment ===

[[Image:CCNP-83.png]]

 
 

=== 7.2.6 Multicast in Layer 2 Solutions ===

[[Image:CCNP-84.png]]

 
 

=== 7.2.7 Cisco Group Management Protocol (CGMP) ===

[[Image:CCNP-85.png]]

 
 

=== 7.2.8 IGMP Snooping ===

[[Image:CCNP-86.png]]

 
 

=== 7.3.1 Protocols Used in Multicast ===

[[Image:CCNP-87.png]]

 
 

=== 7.3.2 Multicast Distribution Trees ===

[[Image:CCNP-88.png]]

 

[[Image:CCNP-89.png]]

 
 

=== 7.3.3 Multicast Distribution Trees Identification ===

[[Image:CCNP-90.png]]

 
 

=== 7.3.4 IP Multicast Routing ===

[[Image:CCNP-91.png]]

 
 

=== 7.3.5 Protocol-Independent Multicast: Describing PIM-DM ===

[[Image:CCNP-92.png]]

 

[[Image:CCNP-93.png]]

 

[[Image:CCNP-94.png]]

 
 

=== 7.3.6 Protocol-Independent Multicast: Describing PIM-SM ===

[[Image:CCNP-95.png]]

 

[[Image:CCNP-96.png]]

 
 

=== 7.4.1 Enabling PIM Sparse Mode and Sparse-Dense Mode ===

[[Image:CCNP-99.png]]

 
 

=== 7.4.2 Inspecting the Multicast Routing Table ===

[[Image:CCNP-100.png]]

 
 

=== 7.4.3 Finding PIM Neighbors ===

[[Image:CCNP-101.png]]

 
 

=== 7.4.4 Checking RP Information ===

[[Image:CCNP-102.png]]

 
 

=== 7.4.5 Checking the Group State ===

[[Image:CCNP-103.png]]

 
 

=== 7.4.6 Configuring a Router to Be a Member of a Group ===

[[Image:CCNP-104.png]]

 

= Module 8: IPv6 =

== Forkortelser ==

'''The IPv6 header contains these fields:'''

*'''Version:''' 4-bit field, the same as in IPv4. It contains the number 6 instead of the number 4 for IPv4.
*'''Traffic Class:''' 8-bit field similar to the type of service (ToS) field in IPv4. It tags the packet with a traffic class that it uses in Differentiated Services (DiffServ). These functionalities are the same for IPv6 and IPv4.
*'''Flow Label:''' 20-bit field that allows a particular flow of traffic to be labeled. It can be used for multilayer switching techniques and faster packet-switching performance.
*'''Payload Length:''' Similar to the Total Length field in IPv4. It specifies the length of the payload, in bytes, that the packet is encapsulating.
*'''Next Header:''' Specifies which header follows the IPv6 packet header. It can be a transport-layer packet, such as TCP or UDP, or it can be an extension header. This field is similar to the Protocol field in IPv4.
*'''Hop Limit:''' Specifies the maximum number of hops that an IP packet can traverse. Each hop or router decreases this field by one (similar to the Time to Live [TTL] field in IPv4). Because there is no checksum in the IPv6 header, the router can decrease the field without recomputing the checksum. Recomputation costs valuable processing time on IPv4 routers.
*'''Source Address:''' This field has 16 octets or 128 bits. It identifies the source of the packet.
*'''Destination Address:''' This field has 16 octets or 128 bits. It identifies the destination of the packet.
*'''Extension Headers:''' Follows the previous eight fields. The number of extension headers is not fixed, so the total length of the extension header chain is variable.

== Teori ==

[[Image:CCNP-105.png]]

 

[[Image:CCNP-106.png]]

 

[[Image:CCNP-107.png]]

 

[[Image:CCNP-108.png]]

 

[[Image:CCNP-109.png]]

 

[[Image:CCNP-110.png]]

 

[[Image:CCNP-111.png]]

 

[[Image:CCNP-112.png]]

 

[[Image:CCNP-113.png]]

 

[[Image:CCNP-114.png]]

 

[[Image:CCNP-115.png]]

 

[[Image:CCNP-116.png]]

 

[[Image:CCNP-117.png]]

 

[[Image:CCNP-118.png]]

 

[[Image:CCNP-119.png]]

 

[[Image:CCNP-120.png]]

 

[[Image:CCNP-121.png]]

 

[[Image:CCNP-122.png]]

 

[[Image:CCNP-123.png]]

 

[[Image:CCNP-124.png]]

 

[[Image:CCNP-125.png]]

 

[[Image:CCNP-126.png]]

 

[[Image:CCNP-127.png]]

 

[[Image:CCNP-128.png]]

 

[[Image:CCNP-129.png]]

 

[[Image:CCNP-130.png]]

 

[[Image:CCNP-131.png]]

 

[[Image:CCNP-132.png]]

 

[[Image:CCNP-133.png]]

 

[[Image:CCNP-134.png]]

 

[[Image:CCNP-135.png]]

 

[[Image:CCNP-136.png]]

 

[[Image:CCNP-137.png]]

 

[[Image:CCNP-138.png]]

 

[[Image:CCNP-139.png]]

 

[[Image:CCNP-140.png]]

Pederrs CCNP 1

2009-02-25T19:44:47Z

Pederrs: /* Module 2: EIGRP */

= Module 1: Scalable Network Design =

== Forkortelser: ==

'''ECNM''' = Enterprise Composite Network Model

'''NAC''' = Network Access Control (NAC) and

'''IBNS''' = Identity Based Network Services (IBNS)

= Module 2: EIGRP =

== Forkortelser: ==

'''AD''' = advertised distance (AD)

'''FD''' = feasible distance (FD)

'''AD og FD forklaring:'''
The lowest cost route is calculated by adding the cost between the next-hop router and the destination—referred to as the advertised distance (AD)—to the cost between the local router and the next-hop router. The sum of these costs is called the feasible distance (FD).

'''DUAL''' = Diffusing Update Algorithm (DUAL)

'''PDM''' = Protocol-dependent modules (PDMs) are responsible for network layer protocol-specific requirements. EIGRP supports IP,AppleTalk, and Novell NetWare. Each protocol has its own EIGRP module and operates independently from any of the others that may be running.

'''RTP''' = RTP is responsible for guaranteed ordered delivery and reception of EIGRP packets to all neighbors. RTP supports intermixed transmission of multicast and unicast packets. For efficiency, only certain EIGRP packets are transmitted reliably.

'''SRTT''' = (smoothed round-trip time): Average number of milliseconds it takes for an EIGRP packet to be sent to this neighbor and for the local router to receive an acknowledgment of that packet. This timer determines the retransmit interval, also known as the retransmission timeout (RTO).

'''RTO''' = (retransmission timeout): Amount of time, in milliseconds, that the router waits for an acknowledgment before retransmitting a reliable packet from the retransmission queue to a neighbor. If an EIGRP update, query, or reply is sent, a copy of the packet is queued. If the RTO expires before an acknowledgment is received, another copy of the queued packet is sent.

'''SIA''' = stuck in active (SIA)

'''LSDB''' = link-state database (LSDB)

'''SPF''' = Shortest Path First (SPF)

== Teori ==

Although the metric can be based on five criteria, EIGRP uses only two of these criteria by default:

*Bandwidth: Smallest bandwidth between source and destination.
*Delay: Cumulative interface delay along the path.

Three other criteria can be used, but are not recommended, because they typically result in frequent recalculation of the topology table:

*Reliability: Worst reliability between source and destination, based on keepalives.
*Loading: Worst load on a link between source and destination, based on the packet rate and the configured bandwidth of the interface.
*MTU: Smallest MTU in the path. MTU is included in the EIGRP routing update, but is not actually used in the metric calculation.

= Module 3: OSPF =

== Forkortelser: ==

== Teori ==

=== 3.1.1 Link State Routing Protocols ===

=== [[Image:CCNP-2.png]] ===

 

=== 3.1.3 Link State Data Structures ===

[[Image:CCNP-3.png]]

 

=== 3.1.6 Types of OSPF Routers ===

The four different types of OSPF routers are:

*Internal routers: Routers that have all their interfaces in the same area and have identical LSDBs.
*Backbone routers: Routers that sit on the perimeter of the backbone area and have at least one interface connected to area 0. Backbone routers maintain OSPF routing information using the same procedures and algorithms as internal routers.
*Area border routers: Routers that have interfaces attached to multiple areas, maintain separate LSDBs for each area to which they connect, and route traffic destined to or arriving from other areas. Area border routers (ABRs) are exit points for the area, which means that routing information destined for another area can get there only via the ABR of the local area. ABRs can be configured to summarize the routing information from the LSDBs of their attached areas. ABRs distribute the routing information into the backbone. The backbone routers then forward the information to the other ABRs. In a multiarea network, an area can have one or more ABRs.
*Autonomous System Boundary Routers: Routers that have at least one interface attached to an external internetwork (another autonomous system), such as a non-OSPF network. Autonomous system boundary routers (ASBRs) can import non-OSPF network information to the OSPF network and vice versa; this process is called route redistribution.

[[Image:CCNP-4.png]]

 

=== 3.1.9 Link-State Data Structures ===

When each router receives the LSU, it does the following:

*If the LSA does not already exist, the router adds the entry to its LSDB, sends a link-state acknowledgment (LSAck) back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists and the received LSA has the same sequence number, the router ignores the LSA entry.
*If the entry already exists but the LSA includes newer information (it has a higher sequence number), the router adds the entry to its LSDB, sends an LSAck back, floods the information to other routers, runs SPF, and updates its routing table.
*If the entry already exists but the LSA includes older information, it sends an LSU to the sender with its newer information

[[Image:CCNP-8.png]]

 

=== 3.2.1 OSPF Packet Types ===

The OSPF protocol exchanges five packet types:

*Hello
*Database description (DBD)
*Link-state request (LSR)
*Link-state update (LSU)
*Link-state acknowledgement (LSAck)

[[Image:CCNP-5.png]]

 

=== 3.2.2 OSPF Packet Header Format ===

All five OSPF packets are encapsulated directly into an IP payload, as shown in Figure . The OSPF packet does not use TCP or User Datagram Protocol (UDP). OSPF requires a reliable packet transport scheme. Since TCP is not used, it has defined its own acknowledgment routine that uses an acknowledgment packet (OSPF packet type 5).

In the IP header, a protocol identifier of 89 defines all OSPF packets. Each of the OSPF packets begins with the same header format. This header has the following fields:

*Version number: For OSPF version 2 or 3
*Type: Differentiates the five OSPF packet types
*Packet length: Length of packet in bytes
*Router ID: Defines which router is the source of the packet
*Area ID: Defines the area where the packet originated
*Checksum: Used for packet-header error detection to ensure that the OSPF packet was not corrupted during transmission
*Authentication type: An option that specifies either no authentication, clear-text passwords, or encrypted Message Digest 5 (MD5) formats for router authentication
*Authentication: Used in the authentication scheme
*Data (for hello packet): Includes a list of known neighborsData (for DBD packet): Contains a summary of LSDB, which includes all known router *IDs and their last sequence number, among a number of other fields
*Data (for LSR packet): Contains the type of LSU needed and the router ID that has the needed LSU
*Data (for LSU packet): Contains the full LSA entries; multiple LSA entries can fit in one OSPF update packet
*Data (for LSAck packet): Is empty

[[Image:CCNP-9.png]]

 

=== 3.3.4 Configuring a Router ID ===

[[Image:CCNP-6.png]]

 

=== Verifying the OSPF Operation ===

[[Image:CCNP-7.png]]

 

=== 3.6.3 OSPF LSA Types (cont.) ===

'''Type 1'''
Every router generates router link advertisements for each area to which it belongs. A type 1 LSA describes the collective states of the directly connected links (interfaces) of the router. These LSAs are flooded only within the area in which they are originated.

'''Type 2'''
A type 2 LSA is generated for every transit broadcast and NBMA network within an area. A transit network has at least two directly attached OSPF routers. Ethernet is an example of a transit network.

The DR of the network is responsible for advertising the network LSA. A type 2 network LSA lists each of the attached routers that make up the transit network, including the DR itself, as well as the subnet mask used on the link. The type 2 LSA then floods to all routers within the transit network area. Type 2 LSAs never cross an area boundary. The link-state ID for a network LSA is the IP interface address of the DR that advertises it.

'''Type 3'''
The ABR sends type 3 summary LSAs. Type 3 LSAs advertise any networks owned by an area to the rest of the areas in the OSPF autonomous system, as shown in Figure .

The link-state ID is set to the network number; the mask is also advertised.

By default, OSPF does not automatically summarize groups of contiguous subnets or summarize a network to its classful boundary. The network operator uses configuration commands to specify how the summarization occurs. By default, a type 3 LSA is advertised into the backbone area for every subnet defined in the originating area, which can cause significant flooding problems. Consequently, you should always consider using manual route summarization at the ABR.

Summary LSAs are flooded throughout a single area only, but are regenerated by ABRs to flood into other areas.

Note
By default, summary LSAs do not contain summarized routes.

'''Type 4'''
A type 4 summary LSA is generated by an ABR only when an ASBR exists within an area. A type 4 LSA identifies the ASBR and provides a route to it. The link-state ID is set to the ASBR router ID. All traffic destined to an external autonomous system requires routing table knowledge of the ASBR that originated the external routes.

In Figure , the ASBR sends a type 1 router LSA with an external bit (e bit) that is set to identify itself as an ASBR. When the ABR, which is identified with a border bit (b bit) in the router LSA, receives the type 1 LSA, it builds a type 4 LSA and floods it to the backbone (area 0). Subsequent ABRs regenerate a type 4 LSA to flood into their areas.

'''Type 5'''
Type 5 external LSAs describe routes to networks outside the OSPF autonomous system. Type 5 LSAs are originated by the ASBR and are flooded to the entire autonomous system.

The link-state ID is the external network number. Because of the flooding scope, and depending on the number of external networks, the default lack of route summarization can be a major issue with external LSAs. Therefore, you should summarize blocks of external network numbers at the ASBR to reduce flooding problems.

'''Type 6'''
Type 6 LSAs are specialized LSAs that are used in multicast OSPF applications.

'''Type 7'''
Type 7 is an LSA type that is used in not-so-stubby areas (NSSAs). They are originated by ASBRs within NSSAs and are flooded only within the NSSA in which they originated.

'''Type 8'''
Type 8 is a specialized LSA that is used in internetworking OSPF and Border Gateway Protocol (BGP).

'''Types 9, 10, and 11'''
The opaque LSAs, types 9, 10, and 11, are designated for future upgrades to OSPF for application-specific purposes. For example, Cisco Systems uses opaque LSAs for Multiprotocol Label Switching (MPLS) with OSPF. Opaque LSAs are distributed using standard LSDB flooding mechanisms. Each type has a different flooding scope.

= Module 4: Integrated IS-IS =

== Forkortelser ==

'''MPLS/TE''' = Multiprotocol Label Switching Traffic Engineering (MPLS/TE).

'''IGP''' = interior gateway protocol (IGP)

'''CLNS''' = Connectionless Network Service (CLNS)

'''CLNP''' = Connectionless Network Protocol (CLNP)

'''LSP''' = link-state packet (LSP)

'''PDU''' = protocol data unit (PDU)

'''IS''' = Intermediate System

'''ES''' = end system (ES)

'''ES-IS''' = End System-to-Intermediate System (ES-IS)

'''ESH''' = End System Hello (ESH)

'''ISH''' = Intermediate System Hello (ISH)

'''IIH''' = IS-IS Hello (IIH)

'''DIS''' = designated IS router (DIS)

'''NSAP''' = network service access points (NSAP)

'''NSEL''' = NSAP selector (NSEL)

'''IDP''' = initial domain part (IDP)

'''AFI''' = authority and format identifier (AFI)

'''IDI''' = initial domain identifier (IDI)

'''DSP''' = domain specific part (DSP)

'''HO-DSP''' = high-order DSP (HO-DSP)

'''SNPA''' = subnetwork point of attachment (SNPA)

'''CLV''' = Code, Length, Value (CLV)

'''SNP''' = Sequence number PDU (SNP)

'''PRC''' = partial route calculation (PRC)

'''Example of a net address:'''

For example, you might assign 49.0001.0000.0c12.3456.00, which represents the following:

AFI of 49
Area ID of 0001
System ID of 0000.0c12.3456, the MAC address of a LAN interface
NSEL of 0

== Teori ==

=== 4.1.2 IS-IS and OSPF ===

[[Image:CCNP-14.png]]

 
 

=== 4.1.4 IS-IS Features ===

[[Image:CCNP-15.png]]

 
 

=== 4.1.5 IS-IS Link-State Operation ===

[[Image:CCNP-16.png]]

 
 

=== 4.1.8 The ES-IS Protocol ===

[[Image:CCNP-17.png]]

 
 

=== 4.1.9 OSI Routing Levels ===

[[Image:CCNP-18.png]]

 
 

=== 4.1.10 IS-IS and OSPF Network Design ===

[[Image:CCNP-19.png]]

 
 

=== 4.1.11 Differences Between Integrated IS-IS and OSPF ===

[[Image:CCNP-20.png]]

 
 

=== 4.2.1 NSAP Addresses ===

[[Image:CCNP-141.png]]

 
 

=== 4.2.2 NSAP Address Structure ===

[[Image:CCNP-21.png]]

 
 

=== 4.2.3 NSAP Address Example ===

[[Image:CCNP-22.png]]

 
 

= Module 5: Route Optimization =

== Forkortelser ==

'''PBR''' = Policy-based routing (PBR)

== Teori ==

=== 5.1.4 Using Seed Metrics ===

[[Image:CCNP-25.png]]

 
 

=== 5.1.6 Defining Administrative Distance ===

[[Image:CCNP-26.png]]

 
 

=== 5.3.2 Passive Interfaces ===

[[Image:CCNP-27.png]]

 
 

=== 5.4.1 Defining Route Maps ===

[[Image:CCNP-28.png]]

 
 

=== 5.4.3 Route Map Operation ===

[[Image:CCNP-29.png]]

 

[[Image:CCNP-30.png]]

 
 

=== 5.4.4 Using Route Map Commands ===

[[Image:CCNP-31.png]]

 
 

=== 5.5.3 Configuring DHCP ===

[[Image:CCNP-32.png]]

 
 

= Module 6: BGP =

== Forkortelser ==
Protocols that run inside an enterprise are called interior gateway protocols (IGPs). Examples of IGPs include RIP versions 1 and 2, EIGRP, and OSPF.

Protocols that run outside an enterprise, or between autonomous systems, are called exterior gateway protocols (EGPs). Typically, EGPs are used to exchange routing information between Internet Service Providers (ISPs).

'''IGP''': Exchanges routing information within an autonomous system. RIP, IGRP, OSPF, IS-IS, and EIGRP are IGPs.

'''EGP''': Exchanges routing information between different autonomous systems. BGP is an EGP.

'''IDRP''' = BGP is an interdomain routing protocol (IDRP), also known as an EGP.

'''EBGP''' = When BGP is running between routers in different autonomous systems, it is called External BGP (EBGP).

'''IBGP''' = When BGP is running between routers in the same autonomous system, it is called Internal BGP (IBGP).

'''RIR''' = Regional Internet Registry (RIR)

'''FSM''' = finite-state machine (FSM)

== Teori ==

=== 6.1.2 BGP Multihoming Options ===

[[Image:CCNP-33.png]]

 
 

=== 6.1.6 BGP Routing Between Autonomous Systems ===

[[Image:CCNP-34.png]]

 
 

=== 6.1.7 Path-Vector Functionality ===

[[Image:CCNP-35.png]]

 
 

=== 6.1.9 Features of BGP ===

[[Image:CCNP-36.png]]

 
 

=== 6.1.10 BGP Databases ===

[[Image:CCNP-37.png]]

 
 

=== 6.1.11 BGP Message Types ===

[[Image:CCNP-38.png]]

 
 

=== 6.2.2 Establishing a Connection Between External BGP Neighbors ===

[[Image:CCNP-39.png]]

 
 

=== 6.2.3 Establishing a Connection Between Internal BGP Neighbors ===

[[Image:CCNP-40.png]]

 
 

=== 6.2.5 IBGP in a Nontransit Autonomous System ===

[[Image:CCNP-41.png]]

 
 

=== 6.2.6 Routing Issues in a Transit Autonomous System ===

[[Image:CCNP-42.png]]

 
 

=== 6.3.1 Basic BGP Configuration ===

[[Image:CCNP-43.png]]

 
 

=== 6.3.2 Activate a BGP Session ===

[[Image:CCNP-44.png]]

 
 

=== 6.3.3 Shutting Down a BGP Neighbor ===

[[Image:CCNP-45.png]]

 
 

=== 6.3.4 BGP Configuration Considerations ===

[[Image:CCNP-46.png]]

 
 

=== 6.3.5 IBGP Peering Issue ===

[[Image:CCNP-47.png]]

 
 

=== 6.3.6 BGP neighbor update-source Command ===

[[Image:CCNP-48.png]]

 

[[Image:CCNP-49.png]]

 
 

=== 6.3.7 EBGP Peering Issue (EBGP Multihop) ===

[[Image:CCNP-50.png]]

 
 

=== 6.3.8 Next Hop Behavior ===

[[Image:CCNP-51.png]]

 

[[Image:CCNP-52.png]]

 
 

=== 6.3.9 BGP neighbor next-hop-self Command ===

[[Image:CCNP-53.png]]

 
 

=== 6.3.10 Injection Routing Information into BGP ===

[[Image:CCNP-54.png]]

 
 

=== 6.3.12 BGP Synchronization ===

[[Image:CCNP-55.png]]

 
 

=== 6.3.13 BGP Synchronization Example ===

[[Image:CCNP-56.png]]

 

[[Image:CCNP-57.png]]

 
 

=== 6.4.1 BGP Neighbor States ===

[[Image:CCNP-58.png]]

 
 

=== 6.4.5 Configuring a Peer Group Example ===

[[Image:CCNP-59.png]]

 
 

=== 6.4.7 Configuring BGP Authentication ===

[[Image:CCNP-60.png]]

 
 

=== 6.4.11 Soft Reset of BGP Sessions ===

[[Image:CCNP-61.png]]

 

[[Image:CCNP-62.png]]

 

[[Image:CCNP-63.png]]

 
 

=== 6.5.3 AS Path Attribute ===

[[Image:CCNP-64.png]]

 
 

=== 6.5.4 Next-Hop Attribute ===

[[Image:CCNP-65.png]]

 
 

=== 6.5.5 Origin Attribute ===

[[Image:CCNP-66.png]]

 
 

=== 6.5.6 Local Preference Attribute ===

[[Image:CCNP-67.png]]

 
 

=== 6.5.7 MED Attribute ===

[[Image:CCNP-68.png]]

 
 

=== 6.5.8 Weight Attribute ===

[[Image:CCNP-69.png]]

 
 

=== 6.5.10 Selecting a BGP Path ===

[[Image:CCNP-70.png]]

 
 

=== 6.6.3 Changing the BGP Local Preference for All Routes ===

[[Image:CCNP-71.png]]

 
 

=== 6.6.7 Setting the MED with Route Maps ===

[[Image:CCNP-73.png]]

 

= Module 7: IP Multicasting =

== Forkortelser ==

VoD = video on demand [VoD]

UDP = User Datagram Protocol (UDP)

Locally scoped (reserved link local) addresses
Reserved by the Internet Assigned Numbers Authority (IANA) for network protocol use.
Address range is from 224.0.0.0 through 224.0.0.255.
Multicasts in this range are never forwarded off the local network, regardless of Time to Live (TTL). Usually, the TTL is set to 1.

Globally scoped addresses
Allocated dynamically throughout the Internet.
Address range is from 224.0.1.0 through 238.255.255.255.
The 224.2.X.X range is used in Multicast Backbone (Mbone) applications. Established by the Internet Engineering Task Force (IETF) to multicast audio and video meetings, Mbone is a collection of Internet routers that support IP multicasting on which various public and private audio and video programs are sent.

Limited (administratively) scoped addresses
Reserved for use inside private domains. Similar to the private IP address space that is used within the boundaries of a single organization, limited or administratively scoped addresses are constrained to a local group or organization.
Address range is from 239.0.0.0 through 239.255.255.255.
Organizations can use limited scope addresses to have local multicast applications that will not be forwarded over the Internet.

SDP = Session Description Protocol (SDP)

SAP = Session Announcement Protocol (SAP)

SDR = Both the sd application and SDP are sometimes called SDR or sdr. In Cisco documentation, SDP/SAP is referred to as sdr.

SIP = Session Initiation Protocol (SIP)

RTSP = Real Time Streaming Protocol (RTSP)

IGMP = Internet Group Management Protocol (IGMP)

CGMP = Cisco Group Management Protocol (CGMP)

ASIC = application-specific integrated circuit (ASIC)

CAM = content-addressable memory (CAM)

SPT = shortest path tree (SPT)

RP = rendezvous point (RP)

PIM = Protocol-Independent Multicast (PIM)

RPF = Reverse Path Forwarding (RPF)

SSM = Source Specific Multicast (SSM)

MSDP = Multicast Source Discovery Protocol [MSDP]

OIL = outgoing interface list (OIL)

DVMRP = Distance Vector Multicast Routing Protocol (DVMRP)

== Teori ==

=== 7.1.3 Multicast Advantages and Disadvantages ===

[[Image:CCNP-75.png]]

 
 

=== 7.1.4 Multicast Applications ===

[[Image:CCNP-76.png]]

 
 

=== 7.1.5 IP Multicast Addresses ===

[[Image:CCNP-77.png]]

 

[[Image:CCNP-78.png]]

 

[[Image:CCNP-79.png]]

 
 

=== 7.1.6 Layer 2 Multicast Addressing ===

[[Image:CCNP-80.png]]

 
 

=== 7.2.2 IGMPv2 Join Group and Leave Group Messages ===

[[Image:CCNP-81.png]]

 
 

=== 7.2.3 Introducing IGMPv3 ===

[[Image:CCNP-82.png]]

 
 

=== 7.2.5 Multicast in the Layer 2 Switching Environment ===

[[Image:CCNP-83.png]]

 
 

=== 7.2.6 Multicast in Layer 2 Solutions ===

[[Image:CCNP-84.png]]

 
 

=== 7.2.7 Cisco Group Management Protocol (CGMP) ===

[[Image:CCNP-85.png]]

 
 

=== 7.2.8 IGMP Snooping ===

[[Image:CCNP-86.png]]

 
 

=== 7.3.1 Protocols Used in Multicast ===

[[Image:CCNP-87.png]]

 
 

=== 7.3.2 Multicast Distribution Trees ===

[[Image:CCNP-88.png]]

 

[[Image:CCNP-89.png]]

 
 

=== 7.3.3 Multicast Distribution Trees Identification ===

[[Image:CCNP-90.png]]

 
 

=== 7.3.4 IP Multicast Routing ===

[[Image:CCNP-91.png]]

 
 

=== 7.3.5 Protocol-Independent Multicast: Describing PIM-DM ===

[[Image:CCNP-92.png]]

 

[[Image:CCNP-93.png]]

 

[[Image:CCNP-94.png]]

 
 

=== 7.3.6 Protocol-Independent Multicast: Describing PIM-SM ===

[[Image:CCNP-95.png]]

 

[[Image:CCNP-96.png]]

 
 

=== 7.4.1 Enabling PIM Sparse Mode and Sparse-Dense Mode ===

[[Image:CCNP-99.png]]

 
 

=== 7.4.2 Inspecting the Multicast Routing Table ===

[[Image:CCNP-100.png]]

 
 

=== 7.4.3 Finding PIM Neighbors ===

[[Image:CCNP-101.png]]

 
 

=== 7.4.4 Checking RP Information ===

[[Image:CCNP-102.png]]

 
 

=== 7.4.5 Checking the Group State ===

[[Image:CCNP-103.png]]

 
 

=== 7.4.6 Configuring a Router to Be a Member of a Group ===

[[Image:CCNP-104.png]]

 

= Module 8: IPv6 =

== Forkortelser ==

'''The IPv6 header contains these fields:'''

*'''Version:''' 4-bit field, the same as in IPv4. It contains the number 6 instead of the number 4 for IPv4.
*'''Traffic Class:''' 8-bit field similar to the type of service (ToS) field in IPv4. It tags the packet with a traffic class that it uses in Differentiated Services (DiffServ). These functionalities are the same for IPv6 and IPv4.
*'''Flow Label:''' 20-bit field that allows a particular flow of traffic to be labeled. It can be used for multilayer switching techniques and faster packet-switching performance.
*'''Payload Length:''' Similar to the Total Length field in IPv4. It specifies the length of the payload, in bytes, that the packet is encapsulating.
*'''Next Header:''' Specifies which header follows the IPv6 packet header. It can be a transport-layer packet, such as TCP or UDP, or it can be an extension header. This field is similar to the Protocol field in IPv4.
*'''Hop Limit:''' Specifies the maximum number of hops that an IP packet can traverse. Each hop or router decreases this field by one (similar to the Time to Live [TTL] field in IPv4). Because there is no checksum in the IPv6 header, the router can decrease the field without recomputing the checksum. Recomputation costs valuable processing time on IPv4 routers.
*'''Source Address:''' This field has 16 octets or 128 bits. It identifies the source of the packet.
*'''Destination Address:''' This field has 16 octets or 128 bits. It identifies the destination of the packet.
*'''Extension Headers:''' Follows the previous eight fields. The number of extension headers is not fixed, so the total length of the extension header chain is variable.

== Teori ==

[[Image:CCNP-105.png]]

 

[[Image:CCNP-106.png]]

 

[[Image:CCNP-107.png]]

 

[[Image:CCNP-108.png]]

 

[[Image:CCNP-109.png]]

 

[[Image:CCNP-110.png]]

 

[[Image:CCNP-111.png]]

 

[[Image:CCNP-112.png]]

 

[[Image:CCNP-113.png]]

 

[[Image:CCNP-114.png]]

 

[[Image:CCNP-115.png]]

 

[[Image:CCNP-116.png]]

 

[[Image:CCNP-117.png]]

 

[[Image:CCNP-118.png]]

 

[[Image:CCNP-119.png]]

 

[[Image:CCNP-120.png]]

 

[[Image:CCNP-121.png]]

 

[[Image:CCNP-122.png]]

 

[[Image:CCNP-123.png]]

 

[[Image:CCNP-124.png]]

 

[[Image:CCNP-125.png]]

 

[[Image:CCNP-126.png]]

 

[[Image:CCNP-127.png]]

 

[[Image:CCNP-128.png]]

 

[[Image:CCNP-129.png]]

 

[[Image:CCNP-130.png]]

 

[[Image:CCNP-131.png]]

 

[[Image:CCNP-132.png]]

 

[[Image:CCNP-133.png]]

 

[[Image:CCNP-134.png]]

 

[[Image:CCNP-135.png]]

 

[[Image:CCNP-136.png]]

 

[[Image:CCNP-137.png]]

 

[[Image:CCNP-138.png]]

 

[[Image:CCNP-139.png]]

 

[[Image:CCNP-140.png]]